Lucene search
China National Vulnerability DatabaseCNVD-2022-05449HistoryJul 30, 2021 - 12:00 a.m.
MetInfo Cross-Site Request Forgery Vulnerability (CNVD-2022-05449)
2021-07-3000:00:00
China National Vulnerability Database
www.cnvd.org.cn
10
0.001 Low
EPSS
Percentile
43.2%
MetInfo uses PHP Mysql architecture, is a very SEO-friendly, full-featured, multi-language, responsive display, extremely suitable for enterprise, company website building cms system. metinfo 6.1.3 version exists cross-site request forgery vulnerability. An attacker can use the doaddsave operation in admin/index.php to conduct a cross-site request forgery attack.
| CPE | Name | Operator | Version |
|---|---|---|---|
| metinfo metinfo | eq | 6.1.3 |
Related
nvd
nvd
CVE-2020-18157
2021-07-30 14:15:13
cve
cve
CVE-2020-18157
2021-07-30 14:15:13
prion
prion
Cross site request forgery (csrf)
2021-07-30 14:15:00
cvelist
cvelist
CVE-2020-18157
2021-07-29 16:17:27