A SQL injection in the /admin/?n=logs&c=index&a=dolist component of Metinfo 7.0 allows attackers to access sensitive database information.
Source: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-20981
Reference (s):
- https://github.com/yao123123123/CVE/issues/1