4 matches found
CVE-2018-17129
MetInfo 6.1.0 has SQL injection in doexport in app/system/feedback/admin/feedbackadmin.class.php via the class1 field...
CVE-2018-17129
MetInfo 6.1.0 has SQL injection in doexport in app/system/feedback/admin/feedbackadmin.class.php via the class1 field...
Sql injection
MetInfo 6.1.0 has SQL injection in doexport in app/system/feedback/admin/feedbackadmin.class.php via the class1 field...
MetInfo Cross-Site Scripting Vulnerability (CNVD-2018-19563)
MetInfo is a content management system CMS developed using PHP and Mysql by China Mito Information Technology Ltd. A security vulnerability exists in the 'doexport' function in the app/system/feedback/admin/feedbackadmin.class.php file in MetInfo version 6.1.0. The vulnerability can be exploited ...