Vulnerabilities

CVE-2020-18106 | BDVDB-2026-159704 Detail

Description#

The GET parameter "id" in WMS v1.0 is passed without filtering, which allows attackers to perform SQL injection.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://github.com/FeMiner/wms/issues/7

Exploit#

No public exploit known

History#

Version 12021-08-27Record published in the CVE List.
Version 22024-08-04Most recent update recorded in the CVE List.