MetInfo SQL Injection Vulnerability (CNVD-2021-51805)

Metinfo MetInfo is a content management system CMS developed by China Mito Metinfo using PHP and Mysql. A SQL injection vulnerability exists in getpassword.php in Metinfo 7.0.0beta, which arises from a database-based application that lacks validation of externally entered SQL statements. An...

CVE-2020-21133

SQL Injection vulnerability in Metinfo 7.0.0 beta in member/getpassword.php?lang=cn&a=dovalid...

Sql injection

SQL Injection vulnerability in Metinfo 7.0.0 beta in member/getpassword.php?lang=cn&a=dovalid...

CVE-2020-21133

SQL Injection vulnerability in Metinfo 7.0.0 beta in member/getpassword.php?lang=cn&a=dovalid...

CVE-2020-21342

Insecure permissions issue in zzcms 201910 via the reset any user password in /one/getpassword.php...

Default credentials

Insecure permissions issue in zzcms 201910 via the reset any user password in /one/getpassword.php...

CVE-2020-21342

CVE-2020-21342 affects the zzcms web application (version 201910). The issue is an insecure permissions weakness in the password reset flow, specifically via /one/getpassword.php, allowing an attacker to reset any user password. Root cause described as improperly designed or implemented code for ...

zzcms 8.2 任意用户密码修改

zzcms 8.2 任意用户密码修改 漏洞描述 zzcms是一款企业建站程序。 zzcms 8.2版本/one/getpassword.php文件存在漏洞，攻击者可利用该漏洞修改任意用户密码。 漏洞分析 /one/getpassword.php文件第 73行，触发漏洞的关键代码。 elseif$action=="step3" && @$SESSION'username'!='' $passwordtrue = isset$POST'password'?$POST'password':""; $password=md5trim$passwordtrue; query"update...

Metinfo 5.1 /member/getpassword.php SQL注入漏洞

No description provided by source...

MetInfo 5.1 /admin/admin/getpassword.php SQL注入漏洞

MetInfo是国内一款比较流行的企业网站管理系统，其5.1版本/admin/admin/getpassword.php文件中的第8行代码处$array0变量最终来在外界传入的变量$p，而且$array0直接拼接到SQL查询语句中，导致了SQL注入漏洞的产生。 MetInfo 5.1...