PT-2018-11544

Name of the Vulnerable Software and Affected Versions Metinfo version 6.0.0 Description The issue allows remote attackers to write and execute code via the module parameter to "admin/column/save.php" in an editor upload action. Recommendations For Metinfo version 6.0.0, consider restricting acces...

CVE-2018-13024: Unrestricted Upload of File with Dangerous Type

Metinfo v6.0.0 allows remote attackers to write code into a .php file, and execute that code, via the module parameter to admin/column/save.php in an editor upload action...