CVE-2019-17418

Name of the Vulnerable Software and Affected Versions MetInfo version 7.0

Description An issue was discovered in MetInfo, where SQL injection is possible via the "admin/?n=language&c=language general&a=doSearchParameter" API endpoint, specifically through the appno parameter.

Recommendations For MetInfo version 7.0, as a temporary workaround, consider restricting access to the "admin/?n=language&c=language general&a=doSearchParameter" API endpoint to minimize the risk of exploitation. Avoid using the appno parameter in this endpoint until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this issue.