File Containment Vulnerability in MetInfo Enterprise Website Builder (CNVD-2020-58396)

MetInfo Enterprise Building System is a free and open source enterprise CMS. A file inclusion vulnerability exists in MetInfo version v5.0.4, which can be exploited by attackers to gain control of the server...

File Containment Vulnerability in MetInfo Enterprise Website Builder (CNVD-2020-58397)

MetInfo Enterprise Building System is a free and open source enterprise CMS. A file inclusion vulnerability exists in MetInfo version v5.0.4, which can be exploited by attackers to gain control of the server...

File Containment Vulnerability in MetInfo Enterprise Website Builder (CNVD-2020-58429)

MetInfo Enterprise Building System is a free and open source enterprise CMS. A file inclusion vulnerability exists in MetInfo version v5.0.4, which can be exploited by attackers to gain control of the server...

File Inclusion Vulnerability in MetInfo Enterprise Website Builder System

MetInfo Enterprise Building System is a free and open source enterprise CMS. A file inclusion vulnerability exists in MetInfo version v5.0.4, which can be exploited by attackers to gain control of the server...

Metinfo SQL Injection (CVE-2020-20800)

An SQL injection vulnerability exists in Metinfo. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...

CVE-2020-20800

An issue was discovered in MetInfo v7.0.0 beta. There is SQL Injection via the install/index.php?action=adminsetup&cndata=yes&endata=yes&showdata=yes URI...

CVE-2020-20800

An issue was discovered in MetInfo v7.0.0 beta. There is SQL Injection via the install/index.php?action=adminsetup&cndata=yes&endata=yes&showdata=yes URI...

Sql injection

An issue was discovered in MetInfo v7.0.0 beta. There is SQL Injection via the install/index.php?action=adminsetup&cndata=yes&endata=yes&showdata=yes URI...

MetInfo SQL Injection Vulnerability (CNVD-2021-05409)

MetInfo using PHP + Mysql architecture, is a very SEO-friendly, full-featured, support for multi-language, responsive display, extremely suitable for business, corporate website construction cms station-building system. MetInfo 7.0.0 beta version has SQL injection vulnerability. Attackers can...

CVE-2020-20800

An issue was discovered in MetInfo v7.0.0 beta. There is SQL Injection via the install/index.php?action=adminsetup&cndata=yes&endata=yes&showdata=yes URI...

CVE-2020-20800

CVE-2020-20800 affects MetInfo v7.0.0 beta. Affected component: installation flow under install/index.php with query parameters action=adminsetup&cndata=yes&endata=yes&showdata=yes, enabling SQL injection via the URI. Impact details in sources indicate potential arbitrary SQL execution; CVSS vect...

File Upload Vulnerability in MetInfo 7.1.0 Backend of Changsha Mito Information Technology Co.

MetInfo is an open source free CMS building system suitable for enterprise building. Changsha Mito Information Technology Co., Ltd MetInfo 7.1.0 file upload vulnerability exists in the background, attackers can exploit the vulnerability to upload malicious compressed packages and then decompress...

File Containment Vulnerability in MetInfo v5.0.4 of Changsha Mito Information Technology Co.

Mito enterprise building system MetInfo is a free and open source enterprise CMS. Changsha Mito Information Technology Co., Ltd MetInfo v5.0.4 version of the file contains a vulnerability that can be exploited by attackers to view sensitive server files...

Command Execution Vulnerability in MetInfo

MetInfo is an open source free CMS building system suitable for enterprise building. MetInfo has a command execution vulnerability. An attacker can exploit the vulnerability to gain server privileges...

Changsha Mito Information Technology Co. metinfo suffers from file upload vulnerability

metinfo is mainly used to build enterprise websites, using PHP+MySQL architecture, supporting SQLite database and so on. A file upload vulnerability exists in metinfo of Changsha Mito Information Technology Co. Ltd, which can be exploited by attackers to obtain server control privileges...

Arbitrary File Deletion Vulnerability in MetInfo of Changsha Mito Information Technology Co.

MetInfo is mainly used to build enterprise websites, using PHP+MySQL architecture, supporting SQLite database and so on. Changsha Mito Information Technology Co., Ltd MetInfo has an arbitrary file deletion vulnerability, which can be exploited by attackers to delete arbitrary files from the websi...

Code Execution Vulnerability in MetInfo of Changsha Mito Information Technology Co.

MetInfo is an open source free CMS building system suitable for enterprise building. Changsha Mito Information Technology Co., Ltd MetInfo has a code execution vulnerability that can be exploited by attackers to obtain server control privileges...

MetInfo suffers from SQL injection vulnerability (CNVD-2020-33064)

MetInfo is an open source free CMS building system suitable for enterprise building. MetInfo has a SQL injection vulnerability that can be exploited by attackers to obtain sensitive database information...

MetInfo has an XSS vulnerability

MetInfo is an open source free CMS building system suitable for enterprise building. MetInfo has an XSS vulnerability that can be exploited by attackers to obtain sensitive information such as user cookies...

File Upload Vulnerability in MetInfo Backend

MetInfo is an open source free CMS building system suitable for enterprise building. MetInfo backend file upload vulnerability can be exploited by attackers to upload malicious files and obtain site administration privileges...