Metinfo 7.0.0 beta - SQL Injection Detection

Metinfo 7.0.0 beta is susceptible to SQL Injection in app/system/language/admin/languagegeneral.class.php via the admin/?n=language&c=languagegeneral&a=doExportPack appno parameter. !/usr/bin/env python3 -- coding: utf-8 -- """Metinfo 7.""" from kittysploit import from lib.protocols.http.httpclie...

MetInfo 7.0.0 beta - SQL Injection Detection

MetInfo 7.0.0 beta is susceptible to SQL injection via the admin/?n=language&c=languagegeneral&a=doSearchParameter appno parameter a different issue than CVE-2019-16997. !/usr/bin/env python3 -- coding: utf-8 -- """MetInfo 7.""" from kittysploit import from lib.protocols.http.httpclient import...

CVE-2019-17418

An issue was discovered in MetInfo 7.0. There is SQL injection via the admin/?n=language&c=languagegeneral&a=doSearchParameter appno parameter, a different issue than CVE-2019-16997...

CVE-2019-17418: Improper Neutralization of Special Elements used in an SQL Command

An issue was discovered in MetInfo 7.0. There is SQL injection via the admin/?n=language&c=languagegeneral&a=doSearchParameter appno parameter, a different issue than CVE-2019-16997...

PT-2019-15143

Name of the Vulnerable Software and Affected Versions MetInfo version 7.0 Description An issue was discovered in MetInfo, where SQL injection is possible via the "admin/?n=language&c=language general&a=doSearchParameter" API endpoint, specifically through the appno parameter. Recommendations For...

Sql injection

In Metinfo 7.0.0beta, a SQL Injection was discovered in app/system/language/admin/languagegeneral.class.php via the admin/?n=language&c=languagegeneral&a=doExportPack appno parameter...

PT-2019-14917

Name of the Vulnerable Software and Affected Versions Metinfo version 7.0.0beta Description A SQL Injection issue was found in the app/system/language/admin/language general.class.php file, specifically via the admin/?n=language&c=language general&a=doExportPack API endpoint, where the appno...

CVE-2019-16997: Improper Neutralization of Special Elements used in an SQL Command

In Metinfo 7.0.0beta, a SQL Injection was discovered in app/system/language/admin/languagegeneral.class.php via the admin/?n=language&c=languagegeneral&a=doExportPack appno parameter...