MetInfo Cross-Site Scripting Vulnerability (CNVD-2019-09128)

MetInfo is a Content Management System CMS developed using PHP and Mysql. MetInfo 6.1.3 suffers from a cross-site scripting vulnerability that can be exploited by an attacker via the admin/index.php?a=dogetpassword abttype parameter...

CVE-2018-18374

XSS exists in the MetInfo 6.1.2 admin/index.php page via the anyid parameter...

Cross site scripting

XSS exists in the MetInfo 6.1.2 admin/index.php page via the anyid parameter...

CVE-2018-18374

XSS exists in the MetInfo 6.1.2 admin/index.php page via the anyid parameter...

CVE-2018-18374

The connected Red Hat/NVD/PRION/CVEs entries confirm a cross-site scripting (XSS) vulnerability in MetInfo 6.1.2. Affected component: MetInfo 6.1.2, specifically the admin/index.php page, exploited via the anyid parameter. Root cause described as a reflected/parameter-based XSS flaw in the admin ...

CVE-2018-18374

XSS exists in the MetInfo 6.1.2 admin/index.php page via the anyid parameter...

MetInfo Cross-Site Scripting Vulnerability (CNVD-2019-09130)

MetInfo is a Content Management System CMS developed using PHP and Mysql. A cross-site scripting vulnerability exists in the admin/index.php page in MetInfo 6.1.2, which can be exploited by an attacker via the anyid parameter...

CVE-2018-18296

MetInfo 6.1.2 has XSS via the /admin/index.php bigclass parameter in an n=column&a=doadd action...

Design/Logic Flaw

MetInfo 6.1.2 has XSS via the /admin/index.php bigclass parameter in an n=column&a=doadd action...

CVE-2018-18296

MetInfo 6.1.2 has XSS via the /admin/index.php bigclass parameter in an n=column&a=doadd action...

CVE-2018-18296

CVE-2018-18296 describes a cross-site scripting (XSS) vulnerability in MetInfo 6.1.2. The issue is triggered via the parameter path /admin/index.php with the bigclass parameter when the request uses n=column&a=doadd. The connected sources corroborate the same vulnerability description across mult...

CVE-2018-18296

MetInfo 6.1.2 has XSS via the /admin/index.php bigclass parameter in an n=column&a=doadd action...

MetInfo Cross-Site Scripting Vulnerability (CNVD-2019-09131)

MetInfo is a Content Management System CMS developed using PHP and Mysql. A cross-site scripting vulnerability exists in MetInfo 6.1.2, which can be exploited by an attacker via the /admin/index.php bigclass parameter in the n=column&a=doadd operation...

SQL Injection Vulnerability in MetInfo

MetInfo is a content management system developed using PHP and Mysql. MetInfo suffers from a SQL injection vulnerability. An attacker can exploit the vulnerability to obtain sensitive database information...

CVE-2018-17129

MetInfo 6.1.0 has SQL injection in doexport in app/system/feedback/admin/feedbackadmin.class.php via the class1 field...

CVE-2018-17129

MetInfo 6.1.0 has SQL injection in doexport in app/system/feedback/admin/feedbackadmin.class.php via the class1 field...

Sql injection

MetInfo 6.1.0 has SQL injection in doexport in app/system/feedback/admin/feedbackadmin.class.php via the class1 field...

CVE-2018-17129

MetInfo 6.1.0 has SQL injection in doexport in app/system/feedback/admin/feedbackadmin.class.php via the class1 field...

CVE-2018-17129

MetInfo 6.1.0 is affected by an SQL injection in doexport() (file: app/system/feedback/admin/feedback_admin.class.php) via the class1 field. Root cause: improper handling of input leading to SQL injection. Impact stated across connected sources: ability to retrieve arbitrary data from the databas...

MetInfo Cross-Site Scripting Vulnerability (CNVD-2018-19563)

MetInfo is a content management system CMS developed using PHP and Mysql by China Mito Information Technology Ltd. A security vulnerability exists in the 'doexport' function in the app/system/feedback/admin/feedbackadmin.class.php file in MetInfo version 6.1.0. The vulnerability can be exploited ...