← All advisories

Unrated severityNVD Advisory· Published Aug 27, 2021· Updated Aug 4, 2024

CVE-2020-18106

CVE-2020-18106

Description

The GET parameter "id" in WMS v1.0 is passed without filtering, which allows attackers to perform SQL injection.

Affected products

2

WMS/WMSdescription
Feminer/wmsllm-fuzzy
Range: =1.0

Patches

Vulnerability mechanics

References

1

github.com/FeMiner/wms/issues/7mitrex_refsource_MISC

News mentions

0

No linked articles in our index yet.