Metinfo: >> Metinfo Security Vulnerabilities
SQL Injection vulnerability in Metinfo 6.1.3 via a dosafety_emailadd action in basic.php.
CVSS Score
9.8
EPSS Score
0.005
Published
2021-07-30
SQL Injection vulnerability in MetInfo 7.0.0beta via admin/?n=language&c=language_web&a=doAddLanguage.
CVSS Score
7.2
EPSS Score
0.003
Published
2021-07-12
SQL Injection vulnerability in Metinfo 7.0.0beta in index.php.
CVSS Score
9.8
EPSS Score
0.005
Published
2021-07-12
SQL Injection vulnerability in Metinfo 7.0.0 beta in member/getpassword.php?lang=cn&a=dovalid.
CVSS Score
9.8
EPSS Score
0.005
Published
2021-07-12
A blind SQL injection in /admin/?n=logs&c=index&a=dode of Metinfo 7.0 beta allows attackers to access sensitive database information.
CVSS Score
7.5
EPSS Score
0.014
Published
2021-07-08
Cross Site Scripting (XSS) vulnerability in MetInfo 7.0.0 via the gourl parameter in login.php.
CVSS Score
6.1
EPSS Score
0.003
Published
2021-06-21
MetInfo 7.0 beta is affected by a file modification vulnerability. Attackers can delete and modify ini files in app/system/language/admin/language_general.class.php and app/system/include/function/file.func.php.
CVSS Score
9.1
EPSS Score
0.009
Published
2021-05-24
An issue was discovered in MetInfo v7.0.0 beta. There is SQL Injection via the install/index.php?action=adminsetup&cndata=yes&endata=yes&showdata=yes URI.
CVSS Score
9.8
EPSS Score
0.005
Published
2020-09-30
app/system/admin/admin/index.class.php in MetInfo 7.0.0beta allows a CSRF attack to add a user account via a doSaveSetup action to admin/index.php, as demonstrated by an admin/?n=admin&c=index&a=doSaveSetup URI.
CVSS Score
8.8
EPSS Score
0.001
Published
2019-10-17
An issue was discovered in MetInfo v7.0.0 beta. There is SQL Injection via the admin/?n=tags&c=index&a=doSaveTags URI.
CVSS Score
9.8
EPSS Score
0.007
Published
2019-10-14