CVE-2019-17418: Improper Neutralization of Special Elements used in an SQL Command

An issue was discovered in MetInfo 7.0. There is SQL injection via the admin/?n=language&c=languagegeneral&a=doSearchParameter appno parameter, a different issue than CVE-2019-16997...

PT-2019-15143

Name of the Vulnerable Software and Affected Versions MetInfo version 7.0 Description An issue was discovered in MetInfo, where SQL injection is possible via the "admin/?n=language&c=language general&a=doSearchParameter" API endpoint, specifically through the appno parameter. Recommendations For...