NetSight
critical9.8

CVE-2020-21180

Sql injection vulnerability in koa2-blog 1.0.0 allows remote attackers to Injecting a malicious SQL statement via the name parameter to the signup page.

Impact

Sql injection vulnerability in koa2-blog 1.0.0 allows remote attackers to Injecting a malicious SQL statement via the name parameter to the signup page.

Affected products

VendorProductAffected versions
Koa2-Blog ProjectKoa2-Blog
Version 1.0.0

Weakness classification

References