CVE-2022-22295

Metinfo v7.5.0 contains a SQL injection vulnerability in parameter_admin.class.php invoked via the table_para parameter. The issue is caused by improper handling of the table_para input, enabling potential arbitrary SQL execution. The CVE entry provides a CVSS v3.1 base score of 9.8 (critical) an...