CVE-2020-20981

MetInfo 7.0 contains a SQL injection in the admin/logs dolist path (/admin/?n=logs&c=index&a=dolist) that can lead to access to sensitive database information. This is confirmed across multiple records (NVD description, Red Hat, NVD listing, and CNVD/CVE aggregations). The vulnerability affects t...

CVE-2020-20981

A SQL injection in the /admin/?n=logs&c=index&a=dolist component of Metinfo 7.0 allows attackers to access sensitive database information...

Metinfo MetInfo SQL注入漏洞

Metinfo MetInfo is a content management system CMS developed by China's Metinfo using PHP and Mysql. A SQL injection vulnerability exists in the /admin/?n=logs&c=index&a=dolist component of Metinfo 7.0, which allows attackers to access sensitive database information...

The vulnerability in the implementation of the /app/system/column/admin/index.class.php script of the Metinfo CMS system allows a perpetrator to increase their privileges.

The vulnerability of the /app/system/column/admin/index.class.php implementation in the Metinfo CMS system is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to enhance their privileges remotely...

CVE-2020-19304

An issue in /admin/index.php?n=system&c=filept&a=doGetFileList of Metinfo v7.0.0 allows attackers to perform a directory traversal and access sensitive information...

CVE-2020-19305

An issue in /app/system/column/admin/index.class.php of Metinfo v7.0.0 causes the indeximg parameter to be deleted when the column is deleted, allowing attackers to escalate privileges...

CVE-2020-19305

An issue in /app/system/column/admin/index.class.php of Metinfo v7.0.0 causes the indeximg parameter to be deleted when the column is deleted, allowing attackers to escalate privileges...

CVE-2020-19304

An issue in /admin/index.php?n=system&c=filept&a=doGetFileList of Metinfo v7.0.0 allows attackers to perform a directory traversal and access sensitive information...

Code injection

An issue in /app/system/column/admin/index.class.php of Metinfo v7.0.0 causes the indeximg parameter to be deleted when the column is deleted, allowing attackers to escalate privileges...

Directory traversal

An issue in /admin/index.php?n=system&c=filept&a=doGetFileList of Metinfo v7.0.0 allows attackers to perform a directory traversal and access sensitive information...

CVE-2020-19305

An issue in /app/system/column/admin/index.class.php of Metinfo v7.0.0 causes the indeximg parameter to be deleted when the column is deleted, allowing attackers to escalate privileges...

CVE-2020-19305

CVE-2020-19305 affects MetInfo v7.0.0. A vulnerability in /app/system/column/admin/index.class.php allows privilege escalation by deleting the indeximg parameter when a column is deleted, per multiple sources. This is a lack of access control in the affected script, enabling an attacker to gain e...

CVE-2020-19304

CVE-2020-19304 affects MetInfo v7.0.0. The issue is a directory traversal in the endpoint /admin/index.php?n=system&c=filept&a=doGetFileList, allowing access to sensitive data. No additional exploit details are provided in the connected documents, and remediation steps (patch versions/workarounds...

CVE-2020-19304

An issue in /admin/index.php?n=system&c=filept&a=doGetFileList of Metinfo v7.0.0 allows attackers to perform a directory traversal and access sensitive information...

Metinfo 路径遍历漏洞

Metinfo MetInfo is a content management system CMS developed using PHP and Mysql by China Mito Metinfo. A security vulnerability exists in Metinfo v7.0.0, which can be exploited by attackers to perform path traversal to access sensitive data...

Metinfo 路径遍历漏洞

Metinfo MetInfo is a content management system CMS developed using PHP and Mysql by China's Mito Metinfo. A security vulnerability exists in Metinfo v7.0.0, which can be exploited by attackers to elevate privileges...

CVE-2020-18175

SQL Injection vulnerability in Metinfo 6.1.3 via a dosafetyemailadd action in basic.php...

CVE-2020-18157

Cross Site Request Forgery CSRF vulnerability in MetInfo 6.1.3 via a doaddsave action in admin/index.php...

CVE-2020-18157

Cross Site Request Forgery CSRF vulnerability in MetInfo 6.1.3 via a doaddsave action in admin/index.php...

CVE-2020-18175

SQL Injection vulnerability in Metinfo 6.1.3 via a dosafetyemailadd action in basic.php...