CVE-2019-17553

An issue was discovered in MetInfo v7.0.0 beta. There is SQL Injection via the admin/?n=tags&c=index&a=doSaveTags URI...

CVE-2019-17553

MetInfo CMS v7.0.0 beta contains a SQL injection vulnerability exploitable through the admin/?n=tags&c=index&a=doSaveTags endpoint. The CVE-2019-17553 record reflects a high/critical impact, with CVSS v3.1 base score 9.8 (CRITICAL) and CVSS v2 base score 7.5 (HIGH). The exploitation details are n...

CVE-2019-17419

An issue was discovered in MetInfo 7.0. There is SQL injection via the admin/?n=user&c=adminuser&a=doGetUserInfo id parameter...

CVE-2019-17418

An issue was discovered in MetInfo 7.0. There is SQL injection via the admin/?n=language&c=languagegeneral&a=doSearchParameter appno parameter, a different issue than CVE-2019-16997...

CVE-2019-17418

An issue was discovered in MetInfo 7.0. There is SQL injection via the admin/?n=language&c=languagegeneral&a=doSearchParameter appno parameter, a different issue than CVE-2019-16997...

CVE-2019-17419

An issue was discovered in MetInfo 7.0. There is SQL injection via the admin/?n=user&c=adminuser&a=doGetUserInfo id parameter...

Sql injection

An issue was discovered in MetInfo 7.0. There is SQL injection via the admin/?n=language&c=languagegeneral&a=doSearchParameter appno parameter, a different issue than CVE-2019-16997...

Sql injection

An issue was discovered in MetInfo 7.0. There is SQL injection via the admin/?n=user&c=adminuser&a=doGetUserInfo id parameter...

MetInfo SQL Injection Vulnerability (CNVD-2019-34804)

MetInfo is a content management system CMS developed by China Mito MetInfo using PHP and Mysql. A SQL injection vulnerability exists in MetInfo. An attacker can exploit this vulnerability to execute illegal SQL commands...

MetInfo SQL Injection Vulnerability (CNVD-2019-34803)

MetInfo is a content management system CMS developed by China Mito MetInfo using PHP and Mysql. A SQL injection vulnerability exists in MetInfo. An attacker can exploit this vulnerability to execute illegal SQL commands...

CVE-2019-17418

An issue was discovered in MetInfo 7.0. There is SQL injection via the admin/?n=language&c=languagegeneral&a=doSearchParameter appno parameter, a different issue than CVE-2019-16997...

CVE-2019-17418

CVE-2019-17418 (MetInfo 7.0.0 beta) is a SQL injection vulnerability in MetInfo 7.0.0 beta. The flaw occurs in the admin player path: admin/?n=language&c=language_general&a=doSearchParameter appno parameter, which facilitates arbitrary SQL execution. The issue is documented in Nuclei templates li...

CVE-2019-17419

An issue was discovered in MetInfo 7.0. There is SQL injection via the admin/?n=user&c=adminuser&a=doGetUserInfo id parameter...

CVE-2019-17419

CVE-2019-17419 affects MetInfo 7.0 with an SQL injection vulnerability in the admin/?n=user&c=admin_user&a=doGetUserInfo id parameter. The issue is documented across multiple sources (NVD/Red Hat/CVE listings) as a SQL injection affecting MetInfo 7.0, with CVSS v2 base score 6.5 (MEDIUM) and CVSS...

CVE-2019-16996

In Metinfo 7.0.0beta, a SQL Injection was discovered in app/system/product/admin/productadmin.class.php via the admin/?n=product&c=productadmin&a=dopara&apptype=shop id parameter...

CVE-2019-16996

In Metinfo 7.0.0beta, a SQL Injection was discovered in app/system/product/admin/productadmin.class.php via the admin/?n=product&c=productadmin&a=dopara&apptype=shop id parameter...

CVE-2019-16997

In Metinfo 7.0.0beta, a SQL Injection was discovered in app/system/language/admin/languagegeneral.class.php via the admin/?n=language&c=languagegeneral&a=doExportPack appno parameter...

CVE-2019-16997

In Metinfo 7.0.0beta, a SQL Injection was discovered in app/system/language/admin/languagegeneral.class.php via the admin/?n=language&c=languagegeneral&a=doExportPack appno parameter...

Sql injection

In Metinfo 7.0.0beta, a SQL Injection was discovered in app/system/language/admin/languagegeneral.class.php via the admin/?n=language&c=languagegeneral&a=doExportPack appno parameter...

Sql injection

In Metinfo 7.0.0beta, a SQL Injection was discovered in app/system/product/admin/productadmin.class.php via the admin/?n=product&c=productadmin&a=dopara&apptype=shop id parameter...