PT-2020-19896

Name of the Vulnerable Software and Affected Versions Geocoder versions prior to 1.6.1 Description The issue allows Boolean-based SQL injection when the within bounding box function is used with untrusted sw lat, sw lng, ne lat, or ne lng data. This can occur in the sql.rb file of the Geocoder...