EUVD-2018-21526

Malware in sbrugna...

EUVD-2018-21520

Malware in sbrugna...

EUVD-2018-21577

Malware in sbrugna...

Cross site scripting

The front page of MetInfo 6.0 allows XSS by sending a feedback message to an administrator...

CVE-2018-9985

The front page of MetInfo 6.0 allows XSS by sending a feedback message to an administrator...

CVE-2018-9985

The front page of MetInfo 6.0 allows XSS by sending a feedback message to an administrator...

Design/Logic Flaw

The reset-password feature in MetInfo 6.0 allows remote attackers to change arbitrary passwords via vectors involving a Host HTTP header that is modified to specify a web server under the attacker's control...

Cross site scripting

Cross-site scripting XSS vulnerability in save.php in MetInfo 6.0 allows remote attackers to inject arbitrary web script or HTML via the webname or weburl parameter...

CVE-2018-9928

CVE-2018-9928 is a Cross-site scripting (XSS) vulnerability in MetInfo 6.0, located in save.php, allowing remote attackers to inject arbitrary script via the webname or weburl parameters. Affected software: MetInfo 6.0 (save.php). Root cause: unsanitized user input in webname/weburl leading to sc...

CVE-2018-9928

Cross-site scripting XSS vulnerability in save.php in MetInfo 6.0 allows remote attackers to inject arbitrary web script or HTML via the webname or weburl parameter...