CVE-2020-21131

SQL Injection vulnerability in MetInfo 7.0.0beta via admin/?n=language=languageweb=doAddLanguage...

CVE-2020-21131

MetInfo 7.0.0 beta CMS contains a SQL injection in the language web add language function (admin/?n=language&c=language_web&a=doAddLanguage). Root cause: inadequate input validation leading to arbitrary SQL execution. Affected product/version: MetInfo 7.0.0 beta (PHP/MySQL). Impact per sources: p...