Sql injection

An issue was discovered in MetInfo 7.0. There is SQL injection via the admin/?n=language&c=languagegeneral&a=doSearchParameter appno parameter, a different issue than CVE-2019-16997...

CVE-2019-16997

MetInfo 7.0.0 beta is susceptible to SQL Injection in the file path app/system/language/admin/language_general.class.php via the admin/?n=language&c=language_general&a=doExportPack appno parameter. The Nuclei templates (CVE-2019-16997) corroborate this, noting the vulnerable parameter and endpoin...