CVE-2022-22295

Metinfo v7.5.0 was discovered to contain a SQL injection vulnerability in parameteradmin.class.php via the tablepara parameter...

CVE-2022-23335

Metinfo v7.5.0 was discovered to contain a SQL injection vulnerability in languagegeneral.class.php via doModifyParameter...

Sql injection

Metinfo v7.5.0 was discovered to contain a SQL injection vulnerability in parameteradmin.class.php via the tablepara parameter...

Sql injection

Metinfo v7.5.0 was discovered to contain a SQL injection vulnerability in languagegeneral.class.php via doModifyParameter...

CVE-2022-23335

Metinfo v7.5.0 was discovered to contain a SQL injection vulnerability in languagegeneral.class.php via doModifyParameter...

CVE-2022-23335

MetInfo v7.5.0 contains a SQL Injection vulnerability in language_general.class.php via doModifyParameter due to improper handling of input in that parameter. Affects MetInfo CMS; root cause is unsafeguarded input in doModifyParameter leading to potential SQL manipulation. Documented impacts indi...

CVE-2022-22295

Metinfo v7.5.0 contains a SQL injection vulnerability in parameter_admin.class.php invoked via the table_para parameter. The issue is caused by improper handling of the table_para input, enabling potential arbitrary SQL execution. The CVE entry provides a CVSS v3.1 base score of 9.8 (critical) an...

CVE-2022-22295

Metinfo v7.5.0 was discovered to contain a SQL injection vulnerability in parameteradmin.class.php via the tablepara parameter...

Metinfo MetInfo SQL注入漏洞

MetInfo is a content management system CMS developed using PHP and Mysql. A SQL injection vulnerability exists in Metinfo, which stems from the product's failure to secure the special characters in the doModify parameter in the languagegeneral.class.php file. An attacker could exploit this...

Metinfo MetInfo SQL注入漏洞

MetInfo is a content management system CMS developed using PHP and Mysql. A SQL injection vulnerability exists in Metinfo, which stems from the product's failure to secure the special characters in the tablepara parameter in the parameteradmin.class.php file. An attacker could exploit this...

Changsha Mito Information Technology Company Limited MetInfo suffers from file upload vulnerability (CNVD-2022-08512)

MetInfo is a php MySQL for the development of enterprise building system. A file upload vulnerability exists in MetInfo of Changsha Mito Information Technology Company Limited, which can be exploited by attackers to gain control of the server...

MetInfo suffers from SQL injection vulnerability (CNVD-2022-07118)

MetInfo is an open source CMS enterprise building system. MetInfo has a SQL injection vulnerability that can be exploited by attackers to obtain sensitive database information...

SQL injection vulnerability in metinfo (CNVD-2022-07115)

MetInfo is an open source CMS enterprise building system. MetInfo has a SQL injection vulnerability that can be exploited by attackers to obtain sensitive database information...

CVE-2020-20600

MetInfo 7.0 beta contains a stored cross-site scripting XSS vulnerability in the $name parameter of admin/?n=column&c=index&a=doAddColumn...

CVE-2020-20600

MetInfo 7.0 beta contains a stored cross-site scripting XSS vulnerability in the $name parameter of admin/?n=column&c=index&a=doAddColumn...

Cross site scripting

MetInfo 7.0 beta contains a stored cross-site scripting XSS vulnerability in the $name parameter of admin/?n=column&c=index&a=doAddColumn...

CVE-2020-20600

CVE-2020-20600 affects MetInfo 7.0 beta. The vulnerability is a stored cross-site scripting (XSS) in the $name parameter of admin/?n=column&c=index&a=doAddColumn. This is confirmed across multiple feeds (NVD, RH, CVE lists) and is tied to MetInfo 7.0 beta with the vulnerability location in the sp...

CVE-2020-20600

MetInfo 7.0 beta contains a stored cross-site scripting XSS vulnerability in the $name parameter of admin/?n=column&c=index&a=doAddColumn...

MetInfo 跨站脚本漏洞

Metinfo MetInfo is a content management system CMS developed by China's Metinfo using PHP and Mysql. A security vulnerability exists in MetInfo 7.0 beta, which can be exploited by attackers to conduct cross-site scripting XSS attacks...

Logic flaw vulnerability in metinfo (CNVD-2022-03235)

Mito enterprise building system MetInfo is a free and open source enterprise CMS. MetInfo has a logic flaw vulnerability that can be exploited by attackers to log in to the background and obtain sensitive information...