Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2019-13409

A SQL injection vulnerability was discovered in TOPMeeting before version 8.8 (2019/08/19)

Description

A SQL injection vulnerability was discovered in TOPMeeting before version 8.8 (2019/08/19). An attacker can use a union based injection query string though a search meeting room feature to get databases schema and username/password.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

TOPOO Technology TOPMeeting

  • before version 8.8 (2019/08/19)affected

References