Design/Logic Flaw

MetInfo through 5.3.17 accepts the same CAPTCHA response for 120 seconds, which makes it easier for remote attackers to bypass intended challenge requirements by modifying the client-server data stream, as demonstrated by the login/findpass page...

CVE-2017-11717

MetInfo through 5.3.17 accepts the same CAPTCHA response for 120 seconds, which makes it easier for remote attackers to bypass intended challenge requirements by modifying the client-server data stream, as demonstrated by the login/findpass page...

Cross site scripting

MetInfo through 5.3.17 allows stored XSS via HTML Edit Mode...

CVE-2017-11716

MetInfo through 5.3.17 allows stored XSS via HTML Edit Mode...

CVE-2017-11717

MetInfo through 5.3.17 accepts the same CAPTCHA response for 120 seconds, which makes it easier for remote attackers to bypass intended challenge requirements by modifying the client-server data stream, as demonstrated by the login/findpass page...

Code injection

There is URL Redirector Abuse in MetInfo through 5.3.17 via the gourl parameter to member/login.php...

CVE-2017-11718

There is URL Redirector Abuse in MetInfo through 5.3.17 via the gourl parameter to member/login.php...

Code injection

job/uploadfilesave.php in MetInfo through 5.3.17 blocks the .php extension but not related extensions, which might allow remote authenticated admins to execute arbitrary PHP code by uploading a .phtml file after certain actions involving admin/system/safe.php and job/cv.php...

CVE-2017-11718

There is URL Redirector Abuse in MetInfo through 5.3.17 via the gourl parameter to member/login.php...

CVE-2017-11715

job/uploadfilesave.php in MetInfo through 5.3.17 blocks the .php extension but not related extensions, which might allow remote authenticated admins to execute arbitrary PHP code by uploading a .phtml file after certain actions involving admin/system/safe.php and job/cv.php...

CVE-2017-11718

MetInfo CMS versions up to 5.3.17 are affected by CVE-2017-11718 due to improper handling of the gourl parameter in member/login.php, enabling URL redirector abuse to external sites. The issue is described as a redirection vulnerability that can be exploited to direct users to phishing sites (per...

CVE-2017-11717

MetInfo CMS up to version 5.3.17 contains a captcha handling flaw: the same CAPTCHA response can be accepted for 120 seconds, enabling remote attackers to bypass challenges by tampering with the client–server data stream (login/findpass page). Affected product is MetInfo; root cause is reuse of a...

CVE-2017-11715

MetInfo ≤ 5.3.17 is vulnerable due to blocking only the .php extension in job/uploadfile_save.php, while not blocking related extensions. An authenticated admin could upload a .phtml file after certain actions (involving admin/system/safe.php and job/cv.php) to execute arbitrary PHP code remotely...

CVE-2017-11715

job/uploadfilesave.php in MetInfo through 5.3.17 blocks the .php extension but not related extensions, which might allow remote authenticated admins to execute arbitrary PHP code by uploading a .phtml file after certain actions involving admin/system/safe.php and job/cv.php...

CVE-2017-11718

There is URL Redirector Abuse in MetInfo through 5.3.17 via the gourl parameter to member/login.php...

CVE-2017-11716

MetInfo vulnerable to stored XSS through HTML Edit Mode in versions up to 5.3.17 (CVE-2017-11716). Affected software: MetInfo CMS. Root cause: HTML Edit Mode allows injection of arbitrary scripts; impact includes partial integrity concerns and possible user impersonation in the web UI. No explici...

CVE-2017-11716

MetInfo through 5.3.17 allows stored XSS via HTML Edit Mode...

CVE-2017-11717

MetInfo through 5.3.17 accepts the same CAPTCHA response for 120 seconds, which makes it easier for remote attackers to bypass intended challenge requirements by modifying the client-server data stream, as demonstrated by the login/findpass page...

MetInfo System URL Redirection Vulnerability

MetInfo is a Content Management System CMS developed using PHP and Mysql. A redirection vulnerability exists in MetInfo 5.3.17 and earlier versions. An attacker constructs a malicious URI and induces the user to parse it, which can redirect the user to any WEB site for phishing attacks...

MetInfo has a logic flaw

MetInfo is a Content Management System CMS developed using PHP and Mysql. A logic vulnerability exists in MetInfo 5.3.17 and earlier versions. A remote attacker can exploit this vulnerability by changing the data flow between client servers to bypass captcha...