CVE-2019-13409

CVE-2019-13409 describes a SQL injection in TOPMeeting prior to version 8.8 (2019/08/19). The vulnerability allows an attacker to perform a union-based injection via the search meeting room feature to retrieve database schema and credentials (username/password). Affected: TOPMeeting