datAInsights CVE Current

CVE-2020-18106

The GET parameter "id" in WMS v1.0 is passed without filtering, which allows attackers to perform SQL injection.

Published: 2021-08-27 · CVSS: Unscored

The GET parameter "id" in WMS v1.0 is passed without filtering, which allows attackers to perform SQL injection.

Original CVE JSON · STIX 2.1

Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7