3 matches found
CVE-2018-17129
MetInfo 6.1.0 has SQL injection in doexport in app/system/feedback/admin/feedbackadmin.class.php via the class1 field...
4.9CVSS5.8AI score0.00878EPSS
SaveExploits1References1
CVE-2018-17129
MetInfo 6.1.0 is affected by an SQL injection in doexport() (file: app/system/feedback/admin/feedback_admin.class.php) via the class1 field. Root cause: improper handling of input leading to SQL injection. Impact stated across connected sources: ability to retrieve arbitrary data from the databas...
4.9CVSS5.8AI score0.00878EPSS
SaveExploits1References1Affected Software1
20