PT-2019-6262
CVE-2020-21132
·
Publicado
2019-11-07
·
Atualizado
2021-07-12
Descrição por
CVSS 3.1
10
CríticaMétricasAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Metinfo version 7.0.0beta
Description
The issue is related to a SQL Injection vulnerability in the index.php script of the Metinfo CMS system. This vulnerability is due to the lack of protection measures for the SQL query structure, allowing a remote attacker to execute arbitrary SQL code.
Recommendations
For Metinfo version 7.0.0beta, consider disabling the
index.php script or restricting access to it until a patch is available to prevent exploitation of the SQL Injection vulnerability.Explorabilidade
Exploit
Correção
Impactos
Pesquisadores
Fornecedores
Produtos afetados
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾