MetInfo Cross-Site Scripting Vulnerability (CNVD-2019-09128)

MetInfo is a Content Management System CMS developed using PHP and Mysql. MetInfo 6.1.3 suffers from a cross-site scripting vulnerability that can be exploited by an attacker via the admin/index.php?a=dogetpassword abttype parameter...

OV3 Online Administration 3.0 Parameter Traversal Arbitrary File Access

Summary With the decision to use the OV3 as a platform for your data management, the course is set for scalable, flexible and high-performance applications. Whether you use the OV3 for your internal data management or use it for commercial business applications such as shops, portals, etc. Thanks...