819 matches found
File upload vulnerability in the latest version of metinfo
metinfo cms is an enterprise website management system with PHP Mysql architecture. A file upload vulnerability exists in metinfo cms due to the system not effectively filtering the depth variable. An attacker can use this vulnerability to bypass the include file and upload a webshell to gain...
Cross-site scripting and cross-site request forgery vulnerabilities in metinfo
metinfo cms is an enterprise website management system with PHP Mysql architecture. There are cross-site scripting and cross-site request forgery vulnerabilities in metinfo. metinfocms "background settings-basic information-third-party code" form does not have token validation and effective...
metinfo cms has csrf vulnerability
metinfo cms is an enterprise website management system with PHP Mysql architecture. metinfo cms has a csrf vulnerability, which can be exploited by attackers to add administrators without restriction...
CVE-2017-6878
Cross-site scripting XSS vulnerability in MetInfo 5.3.15 allows remote authenticated users to inject arbitrary web script or HTML via the name2 parameter to admin/column/delete.php...
Cross site scripting
Cross-site scripting XSS vulnerability in MetInfo 5.3.15 allows remote authenticated users to inject arbitrary web script or HTML via the name2 parameter to admin/column/delete.php...
CVE-2017-6878
Cross-site scripting XSS vulnerability in MetInfo 5.3.15 allows remote authenticated users to inject arbitrary web script or HTML via the name2 parameter to admin/column/delete.php...
CVE-2017-6878
Cross-site scripting XSS vulnerability in MetInfo 5.3.15 allows remote authenticated users to inject arbitrary web script or HTML via the name2 parameter to admin/column/delete.php...
CVE-2017-6878
MetInfo 5.3.15 contains a stored XSS in the admin/column/delete.php endpoint via the name_2 parameter, exploitable by remote authenticated users to inject scripts. PoCs and discussion appear in Seebug and PacketStorm references; no patch or remediation details are provided in the supplied documen...
CVE-2017-6878: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in MetInfo 5.3.15 allows remote authenticated users to inject arbitrary web script or HTML via the name2 parameter to admin/column/delete.php...
PT-2017-17391
Name of the Vulnerable Software and Affected Versions MetInfo version 5.3.15 Description A cross-site scripting XSS issue allows remote authenticated users to inject arbitrary web script or HTML via the name 2 parameter to "admin/column/delete.php" API endpoint. Recommendations For MetInfo versio...
MetInfo HTML Injection Vulnerability
MetInfo using PHP + Mysql architecture, is a very SEO-friendly, full-featured, support for multi-language, responsive display, extremely suitable for business, corporate Web site construction of the cms station-building system. MetInfo has an HTML injection vulnerability that stems from failure t...
MetInfo v5. 3. 15 the presence of a stored XSS vulnerability
No description provided by source...
MetInfo 5.3.15 Cross Site Scripting
PSPSPSPSPSPSPSPSPSPSPSPSPSPSPSPSPSPSPSPSPSPSPSPSPSPSPSPSPSPSPSPSPSPSPSPSPSPSPS PSPSPSPSPSPSPSPSPSPSPSPSPSPSPSPSPSPSPSPSPSPSPSPSPSPSPSPSPSPSPSPSPSPSPSPSPSPSPS CVE-2017-6878:MetInfo5.3.15 Stored Cross Site Scripting Application: MetInfo Versions Affected: 5.3.15 Vendor URL: http://www.metinfo.cn/...
SQL Injection Vulnerability in MetInfo V5.3.12
MetInfo is an enterprise website management system with PHP Mysql architecture. MetInfo V5.3.12 suffers from a SQL injection vulnerability. Allow attackers to exploit the vulnerability to obtain sensitive database information...
Mito MetInfo V5.3.13 Backend Write File Vulnerability
MetInfo is an enterprise website management system with PHP Mysql architecture. A write file vulnerability exists in the backend of MetInfo V5.3.13. It allows attackers to exploit the vulnerability to write to the existing files and gain access to the web server...
SQL Injection Vulnerability in Mito MetInfo V5.3 Backend
MetInfo is an enterprise website management system with PHP Mysql architecture. A SQL injection vulnerability exists in the backend of MetInfo V5.3. Due to the lack of filtering of the class1 parameter, which allows attackers to exploit the vulnerability to obtain sensitive database information...
Cross-site Scripting Vulnerability in metinfo Enterprise Website Builder System
MetInfo enterprise website management system using PHP + Mysql architecture, the whole station built-in SEO search engine optimization mechanism. MetInfo enterprise website management system background storage type cross-site scripting vulnerabilities, attackers can use the vulnerability to inser...
Command Execution Vulnerability in Metinfo 5.3.10 CMS Latest Version
MetInfo is an enterprise website building software that supports multi-terminal display and is easy to use. A command execution vulnerability exists in the latest version of Metinfo 5.3.10 CMS, which can be exploited by attackers to execute arbitrary commands...
MetInfo 3.0 SQL Injection
======================================================================== | Title : MetInfo 3.0 Sql injection vulnerability | Author : indoushka | email : https://www.facebook.com/Indoushka.official/ | Tested on : windows 8.1 FranASSais V.Pro | Version : 3.0 | Vendor : http://www.metinfo.cn...