CVE-2020-18106 – The GET parameter “id” in WMS v1.0 is passed without filtering, which all

The GET parameter “id” in WMS v1.0 is passed without filtering, which allows attackers to perform SQL injection.

 

Source: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-18106

Reference (s):

• https://github.com/FeMiner/wms/issues/7