An issue was discovered in MetInfo 7.0. There is SQL injection via the admin/?n=user&c=admin_user&a=doGetUserInfo id parameter.

Published Oct 9, 2019 · Updated Aug 5, 2024 · Assigned by mitre