694 matches found
Logic flaw vulnerability in metinfo (CNVD-2022-03235)
Mito enterprise building system MetInfo is a free and open source enterprise CMS. MetInfo has a logic flaw vulnerability that can be exploited by attackers to log in to the background and obtain sensitive information...
MetInfo suffers from SQL injection vulnerability (CNVD-2021-103138)
MetInfo is an open source free CMS building system suitable for enterprise building. MetInfo has a SQL injection vulnerability. Attackers can exploit the vulnerability to obtain sensitive information in the database...
Metinfo SQL Injection (CVE-2020-21127)
An SQL injection vulnerability exists in Metinfo. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...
MetInfo is vulnerable to SQL injection (CNVD-2021-81488)
MetInfo is an open source, free CMS website builder for businesses.MetInfo is vulnerable to SQL injection. An attacker can use the vulnerability to obtain sensitive database information...
MetInfo SQL Injection Vulnerability (CNVD-2021-74293)
MetInfo using PHP + Mysql architecture, is a very SEO-friendly, full-featured, support for multi-language, responsive display, extremely suitable for business, corporate website construction cms station-building system. MetInfo 7.0.0 version of the existence of SQL injection vulnerability,...
MetInfo Cross-Site Request Forgery Vulnerability (CNVD-2021-99308)
MetInfo uses PHP Mysql architecture, is a very SEO-friendly, comprehensive, multi-language, responsive display, extremely suitable for enterprise, company website building cms system. metInfo version 7.0.0 cross-site request forgery vulnerability. The attacker can use the admin/?n=admin...
CVE-2020-21127
MetInfo 7.0.0 contains a SQL injection vulnerability via admin/?n=logs&c=index&a=dodel...
CVE-2020-21127
MetInfo 7.0.0 contains a SQL injection vulnerability via admin/?n=logs&c=index&a=dodel...
CVE-2020-21126
MetInfo 7.0.0 contains a Cross-Site Request Forgery CSRF via admin/?n=admin&c=index&a=doSaveInfo...
CVE-2020-21126
MetInfo 7.0.0 contains a Cross-Site Request Forgery CSRF via admin/?n=admin&c=index&a=doSaveInfo...
Cross site request forgery (csrf)
MetInfo 7.0.0 contains a Cross-Site Request Forgery CSRF via admin/?n=admin&c=index&a=doSaveInfo...
Sql injection
MetInfo 7.0.0 contains a SQL injection vulnerability via admin/?n=logs&c=index&a=dodel...
CVE-2020-21127
MetInfo 7.0.0 contains a SQL injection vulnerability via admin/?n=logs&c=index&a=dodel...
CVE-2020-21127
MetInfo 7.0.0 is affected by a SQL injection vulnerability exposed at admin/?n=logs&c=index&a=dodel. Multiple sources (NVD CVE-2020-21127; Red Hat advisory; CVE databases) confirm the issue, with CVSS v3.1 metrics showing a base score of 9.8 (CRITICAL) and CVSS v2.0 of 7.5 (HIGH). No exploit code...
CVE-2020-21126
MetInfo 7.0.0 contains a Cross-Site Request Forgery CSRF via admin/?n=admin&c=index&a=doSaveInfo...
CVE-2020-21126
CVE-2020-21126 affects MetInfo 7.0.0 and is a Cross-Site Request Forgery (CSRF) in the admin path (admin/?n=admin&c=index&a=doSaveInfo). Public records in multiple feeds corroborate a CSRF in MetInfo 7.0.0; CVSS metrics (NVD) indicate a high-severity impact (C/H/I/A) with network attack vector, l...
Metinfo MetInfo SQL注入漏洞
MetInfo using PHP + Mysql architecture, is a very SEO-friendly, full-featured, support for multi-language, responsive display, extremely suitable for business, corporate website construction cms station-building system. MetInfo 7.0.0 version of the existence of SQL injection vulnerability,...
Metinfo MetInfo 跨站请求伪造漏洞
MetInfo uses PHP Mysql architecture, is a very SEO-friendly, comprehensive, multi-language, responsive display, extremely suitable for enterprise, company website building cms system. metInfo version 7.0.0 cross-site request forgery vulnerability. The attacker can use the admin/?n=admin...