CVE-2019-8923

XAMPP through 5.6.8 and previous allows SQL injection via the cds-fpdf.php jahr parameter. NOTE: This product is discontinued.

Date published : 2019-05-14

http://www.securityfocus.com/bid/107168

https://www.exploit-db.com/exploits/46424/