Description
SQL Injection in WMS v1.0 allows remote attackers to execute arbitrary code via the "username" parameter in the component "chkuser.php".
Unscored
CVE-2020-18544
EUVD-2020-10468GHSA-w7f6-9325-vv76
SQL Injection in WMS v1.0 allows remote attackers to execute arbitrary code via the "username" parameter in the component "chkuser.php".
Published Jul 12, 2021 · Updated Aug 4, 2024 · Assigned by mitre