EUVD-2020-11210

Malware in sbrugna...

CVE-2020-19305

An issue in /app/system/column/admin/index.class.php of Metinfo v7.0.0 causes the indeximg parameter to be deleted when the column is deleted, allowing attackers to escalate privileges...

CVE-2020-19305

An issue in /app/system/column/admin/index.class.php of Metinfo v7.0.0 causes the indeximg parameter to be deleted when the column is deleted, allowing attackers to escalate privileges...

CVE-2020-19305

An issue in /app/system/column/admin/index.class.php of Metinfo v7.0.0 causes the indeximg parameter to be deleted when the column is deleted, allowing attackers to escalate privileges...

CVE-2020-19305

CVE-2020-19305 affects MetInfo v7.0.0. A vulnerability in /app/system/column/admin/index.class.php allows privilege escalation by deleting the indeximg parameter when a column is deleted, per multiple sources. This is a lack of access control in the affected script, enabling an attacker to gain e...

CVE-2020-19305: Improper Limitation of a Pathname to a Restricted Directory

An issue in /app/system/column/admin/index.class.php of Metinfo v7.0.0 causes the indeximg parameter to be deleted when the column is deleted, allowing attackers to escalate privileges...