693 matches found
MetInfo suffers from a file upload vulnerability (CNVD-2020-22270)
MetInfo is an open source free CMS building system suitable for enterprise building. MetInfo has a file upload vulnerability that can be exploited by attackers to gain server privileges...
SQL Injection Vulnerability in MetInfo us***.cl***.php File
MetInfo is an open source and free CMS building system suitable for enterprise building, MetInfo enterprise website management system is mainly used to build enterprise websites, using PHP + Mysql architecture. MetInfo us.cl.php file SQL injection vulnerability. Attackers can use the vulnerabilit...
PT-2020-6287 · Metinfo · Metinfo
Name of the Vulnerable Software and Affected Versions: Metinfo version 7.0.0 Description: The issue is related to a lack of access control in the /app/system/column/admin/index.class.php script of the Metinfo CMS system. This allows a remote attacker to escalate privileges by exploiting the...
Arbitrary Code Execution Vulnerability in MetInfo
MetInfo is an open source and free CMS building system suitable for enterprise building, MetInfo enterprise website management system is mainly used to build enterprise websites, using PHP + Mysql architecture. MetInfo arbitrary code execution vulnerability , an attacker can exploit the...
MetInfo suffers from a file upload vulnerability (CNVD-2020-01603)
MetInfo is a professional enterprise-level CMS building system. A file upload vulnerability exists in MetInfo, which can be exploited by attackers to gain web administrator privileges...
MetInfo suffers from SQL injection vulnerability (CNVD-2020-01607)
MetInfo is an enterprise-level website building system. MetInfo suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive database information...
Metinfo SQL Injection Vulnerability (CNVD-2019-42846)
MetInfo is a content management system CMS developed by China Mito MetInfo using PHP and Mysql. A SQL injection vulnerability exists in MetInfo. The vulnerability stems from a lack of validation of externally entered SQL statements in the database-based application. An attacker can exploit this...
Metinfo SQL Injection Vulnerability (CNVD-2019-42845)
MetInfo is a content management system CMS developed by China Mito MetInfo using PHP and Mysql. A SQL injection vulnerability exists in MetInfo. The vulnerability stems from a lack of validation of externally entered SQL statements in the database-based application. An attacker can exploit this...
File Inclusion Vulnerability in MetInfo V7.0.0beta Backend
MetInfo is an open source and free CMS building system suitable for enterprise building, MetInfo enterprise website management system is mainly used to build enterprise websites, using PHP + Mysql architecture. MetInfo V7.0.0beta backend file containment vulnerability can be exploited by an...
SQL Injection Vulnerability in MetInfo7 cl***.php Page
MetInfo is an open source and free CMS building system suitable for enterprise building, MetInfo enterprise website management system is mainly used to build enterprise websites, using PHP + Mysql architecture. MetInfo7 cl.php page SQL injection vulnerability , attackers can use the vulnerability...
SQL Injection Vulnerability in MetInfo7
MetInfo is an open source and free CMS building system suitable for enterprise building, MetInfo enterprise website management system is mainly used to build enterprise websites, using PHP + Mysql architecture. MetInfo7 SQL injection vulnerability , attackers can use the vulnerability to access...
CVE-2019-17676
app/system/admin/admin/index.class.php in MetInfo 7.0.0beta allows a CSRF attack to add a user account via a doSaveSetup action to admin/index.php, as demonstrated by an admin/?n=admin&c=index&a=doSaveSetup URI...
CVE-2019-17676
app/system/admin/admin/index.class.php in MetInfo 7.0.0beta allows a CSRF attack to add a user account via a doSaveSetup action to admin/index.php, as demonstrated by an admin/?n=admin&c=index&a=doSaveSetup URI...
Cross site request forgery (csrf)
app/system/admin/admin/index.class.php in MetInfo 7.0.0beta allows a CSRF attack to add a user account via a doSaveSetup action to admin/index.php, as demonstrated by an admin/?n=admin&c=index&a=doSaveSetup URI...
CVE-2019-17676
app/system/admin/admin/index.class.php in MetInfo 7.0.0beta allows a CSRF attack to add a user account via a doSaveSetup action to admin/index.php, as demonstrated by an admin/?n=admin&c=index&a=doSaveSetup URI...
CVE-2019-17676
CVE-2019-17676 relates to MetInfo 7.0.0beta where a CSRF flaw in app/system/admin/admin/index.class.php allows an attacker to add a user account via the doSaveSetup action to admin/index.php, demonstrated by an admin/?n=admin&c=index&a=doSaveSetup URL. The vulnerability stems from CSRF exposure i...
MetInfo SQL Injection Vulnerability (CNVD-2020-14278)
MetInfo is a content management system CMS developed by China Mito MetInfo using PHP and Mysql. A SQL injection vulnerability exists in MetInfo 7.0.0 beta, which stems from a lack of validation of externally entered SQL statements in database-based applications and can be exploited by an attacker...
CVE-2019-17553
An issue was discovered in MetInfo v7.0.0 beta. There is SQL Injection via the admin/?n=tags&c=index&a=doSaveTags URI...