Metinfo Cross-Site Scripting Vulnerability (CNVD-2019-05925)

MetInfo is a content management system CMS developed using PHP and Mysql by China Mito Information Technology Ltd. A cross-site scripting vulnerability exists in the admin/column/move.php interface in Metinfo version 6.1.3. A remote attacker can exploit this vulnerability to inject arbitrary web...

PT-2018-15119

Name of the Vulnerable Software and Affected Versions Metinfo version 6.1.3 Description The issue is related to reflected XSS. It can be exploited via the lang columnerr4 parameter in the "admin/column/move.php" endpoint. Recommendations For Metinfo version 6.1.3, consider restricting access to t...