CVE-2018-17129

MetInfo 6.1.0 has SQL injection in doexport in app/system/feedback/admin/feedbackadmin.class.php via the class1 field...

Sql injection

MetInfo 6.1.0 has SQL injection in doexport in app/system/feedback/admin/feedbackadmin.class.php via the class1 field...

PT-2018-13910

Name of the Vulnerable Software and Affected Versions MetInfo version 6.1.0 Description The issue concerns SQL injection in the doexport function, located in the app/system/feedback/admin/feedback admin.class.php file, which is vulnerable via the class1 field. Recommendations For MetInfo version...

CVE-2018-17129: Improper Neutralization of Special Elements used in an SQL Command

MetInfo 6.1.0 has SQL injection in doexport in app/system/feedback/admin/feedbackadmin.class.php via the class1 field...

MetInfo Cross-Site Scripting Vulnerability (CNVD-2018-19563)

MetInfo is a content management system CMS developed using PHP and Mysql by China Mito Information Technology Ltd. A security vulnerability exists in the 'doexport' function in the app/system/feedback/admin/feedbackadmin.class.php file in MetInfo version 6.1.0. The vulnerability can be exploited ...