An issue was discovered in MetInfo v7.0.0 beta. There is SQL Injection via the install/index.php?action=adminsetup&cndata=yes&endata=yes&showdata=yes URI.
Source: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-20800
Reference (s):
- https://github.com/anx1ang/cve_requests/blob/master/metinfo7.0.0beta_sqli_at_install.md