CVE-2020-18157

Cross Site Request Forgery CSRF vulnerability in MetInfo 6.1.3 via a doaddsave action in admin/index.php...

CVE-2020-18157

Cross Site Request Forgery CSRF vulnerability in MetInfo 6.1.3 via a doaddsave action in admin/index.php...

CVE-2020-18157

Cross Site Request Forgery CSRF vulnerability in MetInfo 6.1.3 via a doaddsave action in admin/index.php...

MetInfo Cross-Site Request Forgery Vulnerability (CNVD-2022-05449)

MetInfo using PHP + Mysql architecture, is a very SEO-friendly, full-featured, support for multi-language, responsive display, extremely suitable for business, corporate website construction cms station-building system. Metinfo 6.1.3 version of the existence of cross-site request forgery...

Metinfo 跨站请求伪造漏洞

MetInfo using PHP + Mysql architecture, is a very SEO-friendly, full-featured, support for multi-language, responsive display, extremely suitable for business, corporate website construction cms station-building system. Metinfo 6.1.3 version of the existence of cross-site request forgery...

CVE-2020-18157

MetInfo 6.1.3 is affected by a Cross-Site Request Forgery (CSRF) vulnerability via the doaddsave action in admin/index.php. Root cause: CSRF in that action allows state-changing requests without proper user authentication. CVE-2020-18157 has a CVSS‑v3.1 base score of 8.8 (HIGH) with vectors CVSS:...

CVE-2020-18157

Cross Site Request Forgery CSRF vulnerability in MetInfo 6.1.3 via a doaddsave action in admin/index.php...

CVE-2020-18157: Cross-Site Request Forgery (CSRF)

Cross Site Request Forgery CSRF vulnerability in MetInfo 6.1.3 via a doaddsave action in admin/index.php...

PT-2021-10142

Name of the Vulnerable Software and Affected Versions: MetInfo version 6.1.3 Description: A Cross Site Request Forgery CSRF issue exists, which can be exploited via a doaddsave action in the admin/index.php API endpoint. This allows for unauthorized actions to be performed on behalf of a user...

CVE-2018-14420

MetInfo 6.0.0 allows a CSRF attack to add a user account via a doaddsave action to admin/index.php, as demonstrated by an admin/index.php?anyid=47&n=admin&c=adminadmin&a=doaddsave URI...

MetInfo Cross-Site Request Forgery Vulnerability (CNVD-2018-14101)

MetInfo is a content management system CMS developed using PHP and Mysql by China Mito Information Technology Ltd. A cross-site request forgery vulnerability exists in MetInfo version 6.0.0. The vulnerability can be exploited by a remote attacker to add a user account via the doaddsave operation...

CVE-2018-14420: Cross-Site Request Forgery (CSRF)

MetInfo 6.0.0 allows a CSRF attack to add a user account via a doaddsave action to admin/index.php, as demonstrated by an admin/index.php?anyid=47&n=admin&c=adminadmin&a=doaddsave URI...

PT-2018-12502

Name of the Vulnerable Software and Affected Versions MetInfo version 6.0.0 Description The issue allows for a CSRF attack, enabling the addition of a user account through a doaddsave action to admin/index.php. This can be achieved by accessing a specific URI, such as...