Global Education And Technoworld 4.1 Backup Disclosure

==================================================================================================================================== | Title : GLOBAL EDUCATION & TECHNOWORLD Version 4.1 unauthorized backup download Vulnerability | | Author : indoushka | | Tested on : windows 10 Français V.10Pro /...

CVE-2020-20600

MetInfo 7.0 beta contains a stored cross-site scripting XSS vulnerability in the $name parameter of admin/?n=column&c=index&a=doAddColumn...

Metinfo Cross-Site Scripting Vulnerability (CNVD-2019-05925)

MetInfo is a content management system CMS developed using PHP and Mysql by China Mito Information Technology Ltd. A cross-site scripting vulnerability exists in the admin/column/move.php interface in Metinfo version 6.1.3. A remote attacker can exploit this vulnerability to inject arbitrary web...

Cross site scripting

Metinfo 6.1.3 has reflected XSS via the admin/column/move.php langcolumnerr4 parameter...

PT-2018-15119

Name of the Vulnerable Software and Affected Versions Metinfo version 6.1.3 Description The issue is related to reflected XSS. It can be exploited via the lang columnerr4 parameter in the "admin/column/move.php" endpoint. Recommendations For Metinfo version 6.1.3, consider restricting access to t...

CVE-2018-19835: Improper Neutralization of Input During Web Page Generation

Metinfo 6.1.3 has reflected XSS via the admin/column/move.php langcolumnerr4 parameter...

Metinfo Remote Code Execution Vulnerability

MetInfo is a content management system CMS developed using PHP and Mysql by China Mito Information Technology Ltd. A security vulnerability exists in Metinfo version 6.0.0. A remote attacker can exploit the vulnerability by sending the 'module' parameter to the admin/column/save.php file to write...

CVE-2018-13024

Metinfo v6.0.0 allows remote attackers to write code into a .php file, and execute that code, via the module parameter to admin/column/save.php in an editor upload action...

CVE-2018-13024: Unrestricted Upload of File with Dangerous Type

Metinfo v6.0.0 allows remote attackers to write code into a .php file, and execute that code, via the module parameter to admin/column/save.php in an editor upload action...

PT-2018-11544

Name of the Vulnerable Software and Affected Versions Metinfo version 6.0.0 Description The issue allows remote attackers to write and execute code via the module parameter to "admin/column/save.php" in an editor upload action. Recommendations For Metinfo version 6.0.0, consider restricting acces...

PT-2017-17391

Name of the Vulnerable Software and Affected Versions MetInfo version 5.3.15 Description A cross-site scripting XSS issue allows remote authenticated users to inject arbitrary web script or HTML via the name 2 parameter to "admin/column/delete.php" API endpoint. Recommendations For MetInfo versio...

CVE-2017-6878: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in MetInfo 5.3.15 allows remote authenticated users to inject arbitrary web script or HTML via the name2 parameter to admin/column/delete.php...