CVE-2020-18106

Published: 2021-08-27T20:15Z

Last Modified: 2024-11-21T05:08Z

Source: MITRE CVE List

License: MITRE-CVE-TOS

The GET parameter "id" in WMS v1.0 is passed without filtering, which allows attackers to perform SQL injection. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt