PT-2018-14768

Name of the Vulnerable Software and Affected Versions MetInfo version 6.1.3 Description The issue is related to a Cross-Site Scripting XSS problem. It occurs via the langset parameter in the "admin/index.php?a=dogetpassword" endpoint. Recommendations For MetInfo version 6.1.3, update the software...

CVE-2018-19051: Improper Neutralization of Input During Web Page Generation

MetInfo 6.1.3 has XSS via the admin/index.php?a=dogetpassword abttype parameter...

PT-2018-14769

Name of the Vulnerable Software and Affected Versions MetInfo version 6.1.3 Description The issue is related to a security problem where an attacker can inject malicious code. The problem is exploited through the abt type parameter in the "admin/index.php?a=dogetpassword" endpoint. Recommendation...