693 matches found
MetInfo suffers from SQL injection vulnerability (CNVD-2021-103138)
MetInfo is an open source free CMS building system suitable for enterprise building. MetInfo has a SQL injection vulnerability. Attackers can exploit the vulnerability to obtain sensitive information in the database...
Metinfo SQL Injection (CVE-2020-21127)
An SQL injection vulnerability exists in Metinfo. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...
MetInfo is vulnerable to SQL injection (CNVD-2021-81488)
MetInfo is an open source, free CMS website builder for businesses.MetInfo is vulnerable to SQL injection. An attacker can use the vulnerability to obtain sensitive database information...
MetInfo Cross-Site Request Forgery Vulnerability (CNVD-2021-99308)
MetInfo uses PHP Mysql architecture, is a very SEO-friendly, comprehensive, multi-language, responsive display, extremely suitable for enterprise, company website building cms system. metInfo version 7.0.0 cross-site request forgery vulnerability. The attacker can use the admin/?n=admin...
MetInfo SQL Injection Vulnerability (CNVD-2021-74293)
MetInfo using PHP + Mysql architecture, is a very SEO-friendly, full-featured, support for multi-language, responsive display, extremely suitable for business, corporate website construction cms station-building system. MetInfo 7.0.0 version of the existence of SQL injection vulnerability,...
CVE-2020-21127
MetInfo 7.0.0 contains a SQL injection vulnerability via admin/?n=logs&c=index&a=dodel...
CVE-2020-21127
MetInfo 7.0.0 contains a SQL injection vulnerability via admin/?n=logs&c=index&a=dodel...
CVE-2020-21126
MetInfo 7.0.0 contains a Cross-Site Request Forgery CSRF via admin/?n=admin&c=index&a=doSaveInfo...
CVE-2020-21126
MetInfo 7.0.0 contains a Cross-Site Request Forgery CSRF via admin/?n=admin&c=index&a=doSaveInfo...
Cross site request forgery (csrf)
MetInfo 7.0.0 contains a Cross-Site Request Forgery CSRF via admin/?n=admin&c=index&a=doSaveInfo...
Sql injection
MetInfo 7.0.0 contains a SQL injection vulnerability via admin/?n=logs&c=index&a=dodel...
CVE-2020-21127
MetInfo 7.0.0 contains a SQL injection vulnerability via admin/?n=logs&c=index&a=dodel...
CVE-2020-21127
MetInfo 7.0.0 is affected by a SQL injection vulnerability exposed at admin/?n=logs&c=index&a=dodel. Multiple sources (NVD CVE-2020-21127; Red Hat advisory; CVE databases) confirm the issue, with CVSS v3.1 metrics showing a base score of 9.8 (CRITICAL) and CVSS v2.0 of 7.5 (HIGH). No exploit code...
CVE-2020-21126
CVE-2020-21126 affects MetInfo 7.0.0 and is a Cross-Site Request Forgery (CSRF) in the admin path (admin/?n=admin&c=index&a=doSaveInfo). Public records in multiple feeds corroborate a CSRF in MetInfo 7.0.0; CVSS metrics (NVD) indicate a high-severity impact (C/H/I/A) with network attack vector, l...
CVE-2020-21126
MetInfo 7.0.0 contains a Cross-Site Request Forgery CSRF via admin/?n=admin&c=index&a=doSaveInfo...
Metinfo MetInfo 跨站请求伪造漏洞
MetInfo uses PHP Mysql architecture, is a very SEO-friendly, comprehensive, multi-language, responsive display, extremely suitable for enterprise, company website building cms system. metInfo version 7.0.0 cross-site request forgery vulnerability. The attacker can use the admin/?n=admin...
Metinfo MetInfo SQL注入漏洞
MetInfo using PHP + Mysql architecture, is a very SEO-friendly, full-featured, support for multi-language, responsive display, extremely suitable for business, corporate website construction cms station-building system. MetInfo 7.0.0 version of the existence of SQL injection vulnerability,...
CVE-2020-20981
A SQL injection in the /admin/?n=logs&c=index&a=dolist component of Metinfo 7.0 allows attackers to access sensitive database information...