693 matches found
Sql injection
SQL Injection vulnerability in Metinfo 6.1.3 via a dosafetyemailadd action in basic.php...
Cross site request forgery (csrf)
Cross Site Request Forgery CSRF vulnerability in MetInfo 6.1.3 via a doaddsave action in admin/index.php...
Metinfo SQL Injection Vulnerability (CNVD-2021-61761)
MetInfo is a content management system CMS developed using PHP and Mysql. Metinfo version 6.1.3 is vulnerable to SQL injection attacks via the dosafetyemailadd operation in basic.php...
Metinfo MetInfo SQL注入漏洞
MetInfo is a content management system CMS developed using PHP and Mysql. Metinfo version 6.1.3 is vulnerable to SQL injection attacks via the dosafetyemailadd operation in basic.php...
Metinfo 跨站请求伪造漏洞
MetInfo using PHP + Mysql architecture, is a very SEO-friendly, full-featured, support for multi-language, responsive display, extremely suitable for business, corporate website construction cms station-building system. Metinfo 6.1.3 version of the existence of cross-site request forgery...
MetInfo Cross-Site Request Forgery Vulnerability (CNVD-2022-05449)
MetInfo using PHP + Mysql architecture, is a very SEO-friendly, full-featured, support for multi-language, responsive display, extremely suitable for business, corporate website construction cms station-building system. Metinfo 6.1.3 version of the existence of cross-site request forgery...
CVE-2020-18175
SQL Injection vulnerability in Metinfo 6.1.3 via a dosafetyemailadd action in basic.php...
CVE-2020-18175
CVE-2020-18175 affects MetInfo 6.1.3, with SQL Injection via the dosafety_emailadd action in basic.php. The entry is corroborated across multiple sources (NVD, Red Hat, CNVD/CNNVD family) and shows high to critical impact: CVSS2 base 7.5 (HIGH) and CVSS3.1 base 9.8 (CRITICAL). The connected docum...
CVE-2020-18157
MetInfo 6.1.3 is affected by a Cross-Site Request Forgery (CSRF) vulnerability via the doaddsave action in admin/index.php. Root cause: CSRF in that action allows state-changing requests without proper user authentication. CVE-2020-18157 has a CVSS‑v3.1 base score of 8.8 (HIGH) with vectors CVSS:...
CVE-2020-18157
Cross Site Request Forgery CSRF vulnerability in MetInfo 6.1.3 via a doaddsave action in admin/index.php...
MetInfo SQL Injection Vulnerability (CNVD-2021-51805)
Metinfo MetInfo is a content management system CMS developed by China Mito Metinfo using PHP and Mysql. A SQL injection vulnerability exists in getpassword.php in Metinfo 7.0.0beta, which arises from a database-based application that lacks validation of externally entered SQL statements. An...
MetInfo SQL Injection Vulnerability (CNVD-2021-51809)
Metinfo MetInfo is a content management system CMS developed by China Mito Metinfo using PHP and Mysql. A SQL injection vulnerability exists in index.php in Metinfo 7.0.0beta, which arises from a database-based application that lacks validation of externally entered SQL statements. An attacker ca...
CVE-2020-21131
SQL Injection vulnerability in MetInfo 7.0.0beta via admin/?n=language&c=languageweb&a=doAddLanguage...
CVE-2020-21132
SQL Injection vulnerability in Metinfo 7.0.0beta in index.php...
CVE-2020-21133
SQL Injection vulnerability in Metinfo 7.0.0 beta in member/getpassword.php?lang=cn&a=dovalid...
CVE-2020-21131
SQL Injection vulnerability in MetInfo 7.0.0beta via admin/?n=language&c=languageweb&a=doAddLanguage...
CVE-2020-21133
SQL Injection vulnerability in Metinfo 7.0.0 beta in member/getpassword.php?lang=cn&a=dovalid...
CVE-2020-21132
SQL Injection vulnerability in Metinfo 7.0.0beta in index.php...