CVE-2020-21133

SQL Injection vulnerability in Metinfo 7.0.0 beta in member/getpassword.php?lang=cn=dovalid...

CVE-2020-21133

CVE-2020-21133 is a SQL injection vulnerability in MetInfo 7.0.0 beta, located in member/getpassword.php?lang=cn&a=dovalid. Root cause: lack of validation of externally entered SQL statements, allowing an attacker to execute arbitrary SQL commands. Documented impact includes high confidentiality,...