Unscored CVE-2020-5659 EUVD-2020-26820GHSA-q9gf-vxw3-f7xp

SQL injection vulnerability in the XooNIps 3.49 and earlier allows remote authenticated attackers to execute arbitrary SQL commands via uns…

Published Nov 16, 2020 · Updated Aug 4, 2024 · Assigned by jpcert

Vendor: Neuroinformatics Unit, Integrative Computational Brain Science Collaboration Division, RIKEN Center for Brain Science Product: XooNIps

Description

SQL injection vulnerability in the XooNIps 3.49 and earlier allows remote authenticated attackers to execute arbitrary SQL commands via unspecified vectors.

Affected products

Vendor	Product	Affected	Fixed
Neuroinformatics Unit, Integrative Computational Brain Science Collaboration Division, RIKEN Center for Brain Science	XooNIps	3.49 and earlier	—

References

https://xoonips.osdn.jp/modules/news/index.php?page=article&storyid=13
https://jvn.jp/en/vu/JVNVU92053563/index.html