EUVD-2022-27441

Malicious code in bioql PyPI...

Metinfo SQL Injection Vulnerability (CNVD-2022-14806)

MetInfo is a content management system CMS developed using PHP and Mysql. A SQL injection vulnerability exists in Metinfo, which stems from the product's failure to secure the special characters in the tablepara parameter in the parameteradmin.class.php file. An attacker could exploit this...

CVE-2022-22295

Metinfo v7.5.0 was discovered to contain a SQL injection vulnerability in parameteradmin.class.php via the tablepara parameter...

Sql injection

Metinfo v7.5.0 was discovered to contain a SQL injection vulnerability in parameteradmin.class.php via the tablepara parameter...

CVE-2022-22295

Metinfo v7.5.0 contains a SQL injection vulnerability in parameter_admin.class.php invoked via the table_para parameter. The issue is caused by improper handling of the table_para input, enabling potential arbitrary SQL execution. The CVE entry provides a CVSS v3.1 base score of 9.8 (critical) an...

CVE-2022-22295

Metinfo v7.5.0 was discovered to contain a SQL injection vulnerability in parameteradmin.class.php via the tablepara parameter...