693 matches found
metinfo cms has csrf vulnerability
metinfo cms is an enterprise website management system with PHP Mysql architecture. metinfo cms has a csrf vulnerability, which can be exploited by attackers to add administrators without restriction...
CVE-2017-6878
Cross-site scripting XSS vulnerability in MetInfo 5.3.15 allows remote authenticated users to inject arbitrary web script or HTML via the name2 parameter to admin/column/delete.php...
CVE-2017-6878
Cross-site scripting XSS vulnerability in MetInfo 5.3.15 allows remote authenticated users to inject arbitrary web script or HTML via the name2 parameter to admin/column/delete.php...
Cross site scripting
Cross-site scripting XSS vulnerability in MetInfo 5.3.15 allows remote authenticated users to inject arbitrary web script or HTML via the name2 parameter to admin/column/delete.php...
CVE-2017-6878
MetInfo 5.3.15 contains a stored XSS in the admin/column/delete.php endpoint via the name_2 parameter, exploitable by remote authenticated users to inject scripts. PoCs and discussion appear in Seebug and PacketStorm references; no patch or remediation details are provided in the supplied documen...
CVE-2017-6878
Cross-site scripting XSS vulnerability in MetInfo 5.3.15 allows remote authenticated users to inject arbitrary web script or HTML via the name2 parameter to admin/column/delete.php...
MetInfo HTML Injection Vulnerability
MetInfo using PHP + Mysql architecture, is a very SEO-friendly, full-featured, support for multi-language, responsive display, extremely suitable for business, corporate Web site construction of the cms station-building system. MetInfo has an HTML injection vulnerability that stems from failure t...
MetInfo v5. 3. 15 the presence of a stored XSS vulnerability
No description provided by source...
MetInfo 5.3.15 Cross Site Scripting
PSPSPSPSPSPSPSPSPSPSPSPSPSPSPSPSPSPSPSPSPSPSPSPSPSPSPSPSPSPSPSPSPSPSPSPSPSPSPS PSPSPSPSPSPSPSPSPSPSPSPSPSPSPSPSPSPSPSPSPSPSPSPSPSPSPSPSPSPSPSPSPSPSPSPSPSPSPS CVE-2017-6878:MetInfo5.3.15 Stored Cross Site Scripting Application: MetInfo Versions Affected: 5.3.15 Vendor URL: http://www.metinfo.cn/...
SQL Injection Vulnerability in MetInfo V5.3.12
MetInfo is an enterprise website management system with PHP Mysql architecture. MetInfo V5.3.12 suffers from a SQL injection vulnerability. Allow attackers to exploit the vulnerability to obtain sensitive database information...
Mito MetInfo V5.3.13 Backend Write File Vulnerability
MetInfo is an enterprise website management system with PHP Mysql architecture. A write file vulnerability exists in the backend of MetInfo V5.3.13. It allows attackers to exploit the vulnerability to write to the existing files and gain access to the web server...
SQL Injection Vulnerability in Mito MetInfo V5.3 Backend
MetInfo is an enterprise website management system with PHP Mysql architecture. A SQL injection vulnerability exists in the backend of MetInfo V5.3. Due to the lack of filtering of the class1 parameter, which allows attackers to exploit the vulnerability to obtain sensitive database information...
Cross-site Scripting Vulnerability in metinfo Enterprise Website Builder System
MetInfo enterprise website management system using PHP + Mysql architecture, the whole station built-in SEO search engine optimization mechanism. MetInfo enterprise website management system background storage type cross-site scripting vulnerabilities, attackers can use the vulnerability to inser...
Command Execution Vulnerability in Metinfo 5.3.10 CMS Latest Version
MetInfo is an enterprise website building software that supports multi-terminal display and is easy to use. A command execution vulnerability exists in the latest version of Metinfo 5.3.10 CMS, which can be exploited by attackers to execute arbitrary commands...
MetInfo 3.0 SQL Injection
======================================================================== | Title : MetInfo 3.0 Sql injection vulnerability | Author : indoushka | email : https://www.facebook.com/Indoushka.official/ | Tested on : windows 8.1 FranASSais V.Pro | Version : 3.0 | Vendor : http://www.metinfo.cn...
MetInfo 5.0.4 SQL injection vulnerability
No description provided by source...
MetInfo 5.0.4 SQL Injection
======================================================================== | Title : MetInfo 5.0.4 Sql injection vulnerability | Author : indoushka | email : [email protected] | Tested on: windows 8.1 Français V.Pro | Vendor : http://www.metinfo.cn...
MetInfo 5.3.4 /member/login.php SQL注入
No description provided by source...