MetInfo 7.0.0 beta - SQL Injection

MetInfo 7.0.0 beta is susceptible to SQL injection via the admin/?n=language&c=languagegeneral&a=doSearchParameter appno parameter a different issue than CVE-2019-16997. id: CVE-2019-17418 info: name: MetInfo 7.0.0 beta - SQL Injection author: ritikchaddha severity: high description: | MetInfo...

CVE-2019-17418

An issue was discovered in MetInfo 7.0. There is SQL injection via the admin/?n=language=languagegeneral=doSearchParameter appno parameter, a different issue than CVE-2019-16997...

CVE-2019-17418

An issue was discovered in MetInfo 7.0. There is SQL injection via the admin/?n=language&c=languagegeneral&a=doSearchParameter appno parameter, a different issue than CVE-2019-16997...

CVE-2019-17418

CVE-2019-17418 (MetInfo 7.0.0 beta) is a SQL injection vulnerability in MetInfo 7.0.0 beta. The flaw occurs in the admin player path: admin/?n=language&c=language_general&a=doSearchParameter appno parameter, which facilitates arbitrary SQL execution. The issue is documented in Nuclei templates li...