critical9.8
CVE-2020-18106
The GET parameter "id" in WMS v1.0 is passed without filtering, which allows attackers to perform SQL injection.
Impact
The GET parameter "id" in WMS v1.0 is passed without filtering, which allows attackers to perform SQL injection.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Wms Project | Wms | Version 1.0 |