Cross site scripting

Cross Site Scripting XSS vulnerability in MetInfo 7.0.0 via the gourl parameter in login.php...

CVE-2020-21517

MetInfo 7.0.0 is affected by a Cross‑Site Scripting (XSS) vulnerability exploitable via the gourl parameter in login.php. The issue is identified as CVE-2020-21517. Provided sources consistently describe the vulnerable entry as MetInfo’s login flow accepting gourl input that can be manipulated to...

CVE-2020-21517

Cross Site Scripting XSS vulnerability in MetInfo 7.0.0 via the gourl parameter in login.php...

Metinfo 跨站脚本漏洞

MetInfo is a Content Management System CMS developed using PHP and Mysql. A cross-site scripting vulnerability exists in MetInfo. The vulnerability can be exploited to conduct cross-site scripting attacks via the gourl parameter in login.php...

Logic flaw vulnerability in metinfo (CNVD-2021-42407)

Mito enterprise building system MetInfo is a free and open source enterprise CMS. There is a logic flaw vulnerability in metinfo, which can be exploited by an attacker to delete arbitrary files without authorization...

MetInfo suffers from a SQL injection vulnerability (CNVD-2021-40243)

MetInfo is an open source free CMS building system suitable for enterprise building. MetInfo has a SQL injection vulnerability. Attackers can exploit the vulnerability to obtain sensitive information in the database...

SQL Injection Vulnerability in MetInfo 7.3.0

MetInfo is a free and open source enterprise CMS. MetInfo 7.3.0 suffers from a SQL injection vulnerability, which can be exploited by an attacker to obtain sensitive information from the database...

MetInfo File Modification Vulnerability

MetInfo adopts PHP+Mysql architecture, it is a cms building system which is very friendly to SEO, fully functional, supports multi-language, responsive display, and extremely suitable for enterprise and company website construction. A file modification vulnerability exists in MetInfo 7.0 beta. An...

CVE-2020-20907

MetInfo 7.0 beta is affected by a file modification vulnerability. Attackers can delete and modify ini files in app/system/language/admin/languagegeneral.class.php and app/system/include/function/file.func.php...

CVE-2020-20907

MetInfo 7.0 beta is affected by a file modification vulnerability. Attackers can delete and modify ini files in app/system/language/admin/languagegeneral.class.php and app/system/include/function/file.func.php...

Design/Logic Flaw

MetInfo 7.0 beta is affected by a file modification vulnerability. Attackers can delete and modify ini files in app/system/language/admin/languagegeneral.class.php and app/system/include/function/file.func.php...

CVE-2020-20907

MetInfo 7.0 beta is affected by a file modification vulnerability allowing attackers to delete and modify ini files in app/system/language/admin/language_general.class.php and app/system/include/function/file.func.php. Root cause described across multiple sources as a vulnerability in MetInfo’s f...

CVE-2020-20907

MetInfo 7.0 beta is affected by a file modification vulnerability. Attackers can delete and modify ini files in app/system/language/admin/languagegeneral.class.php and app/system/include/function/file.func.php...

PT-2021-10553 · Metinfo · Metinfo

Name of the Vulnerable Software and Affected Versions: MetInfo version 7.0 beta Description: The issue allows attackers to delete and modify ini files in specific locations, including app/system/language/admin/language general.class.php and app/system/include/function/file.func.php...

MetInfo 路径遍历漏洞

MetInfo adopts PHP+Mysql architecture, it is a cms building system which is very friendly to SEO, fully functional, supports multi-language, responsive display, and extremely suitable for enterprise and company website construction. A file modification vulnerability exists in MetInfo 7.0 beta. An...

MetInfo suffers from a command execution vulnerability (CNVD-2021-30098)

MetInfo is a free and open source enterprise CMS. MetInfo suffers from a command execution vulnerability that can be exploited by an attacker to gain control of the server...

MetInfo suffers from a command execution vulnerability (CNVD-2021-29218)

MetInfo is a multi-language, full-featured, secure and stable, multi-terminal display and support for visual editing, easy to use enterprise station software. MetInfo has a command execution vulnerability that can be exploited by attackers to gain control of the server...

File Deletion Vulnerability in MetInfo

MetInfo is an open source free CMS building system suitable for enterprise building. MetInfo has a file deletion vulnerability that can be exploited by attackers to compromise integrity...

File Upload Vulnerability in MetInfo Enterprise Website Builder System

MetInfo Enterprise Building System is a free and open source enterprise CMS. A file upload vulnerability exists in MetInfo Enterprise CMS, which can be exploited by an attacker to gain control of the server...

SQL Injection Vulnerability in MetInfo Backend of Changsha Mito Information Technology Co.

MetInfo is an open source free CMS building system suitable for enterprise building. Changsha Mito Information Technology Co., Ltd. MetInfo backend has a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive information from the database...