CVE-2020-5659
SQL injection vulnerability in the XooNIps 3.49 and earlier allows remote authenticated attackers to execute arbitrary SQL commands via unspecified vectors.
Date published : 2020-11-15
https://jvn.jp/en/vu/JVNVU92053563/index.html
https://xoonips.osdn.jp/modules/news/index.php?page=article&storyid=13