CVE-2020-5659

Severity CVSS v4.0:
Pending analysis
Type:
CWE-89 SQL Injection
Publication date:
16/11/2020
Last modified:
20/11/2020

Description

SQL injection vulnerability in the XooNIps 3.49 and earlier allows remote authenticated attackers to execute arbitrary SQL commands via unspecified vectors.

Vulnerable products and versions

CPE From Up to
cpe:2.3:a:riken:xoonips:*:*:*:*:*:xoops:*:* 3.49 (including)