Show filters
57 Total Results
Displaying 11-20 of 57
Sort by:
Attacker Value
Unknown
CVE-2020-18157
Disclosure Date: July 30, 2021 (last updated February 23, 2025)
Cross Site Request Forgery (CSRF) vulnerability in MetInfo 6.1.3 via a doaddsave action in admin/index.php.
0
Attacker Value
Unknown
CVE-2020-21132
Disclosure Date: July 12, 2021 (last updated February 23, 2025)
SQL Injection vulnerability in Metinfo 7.0.0beta in index.php.
0
Attacker Value
Unknown
CVE-2020-21133
Disclosure Date: July 12, 2021 (last updated February 23, 2025)
SQL Injection vulnerability in Metinfo 7.0.0 beta in member/getpassword.php?lang=cn&a=dovalid.
0
Attacker Value
Unknown
CVE-2020-21131
Disclosure Date: July 12, 2021 (last updated February 23, 2025)
SQL Injection vulnerability in MetInfo 7.0.0beta via admin/?n=language&c=language_web&a=doAddLanguage.
0
Attacker Value
Unknown
CVE-2020-20585
Disclosure Date: July 08, 2021 (last updated February 23, 2025)
A blind SQL injection in /admin/?n=logs&c=index&a=dode of Metinfo 7.0 beta allows attackers to access sensitive database information.
0
Attacker Value
Unknown
CVE-2020-21517
Disclosure Date: June 21, 2021 (last updated February 22, 2025)
Cross Site Scripting (XSS) vulnerability in MetInfo 7.0.0 via the gourl parameter in login.php.
0
Attacker Value
Unknown
CVE-2020-20907
Disclosure Date: May 24, 2021 (last updated February 22, 2025)
MetInfo 7.0 beta is affected by a file modification vulnerability. Attackers can delete and modify ini files in app/system/language/admin/language_general.class.php and app/system/include/function/file.func.php.
0
Attacker Value
Unknown
CVE-2020-20800
Disclosure Date: September 30, 2020 (last updated February 22, 2025)
An issue was discovered in MetInfo v7.0.0 beta. There is SQL Injection via the install/index.php?action=adminsetup&cndata=yes&endata=yes&showdata=yes URI.
0
Attacker Value
Unknown
CVE-2019-17676
Disclosure Date: October 17, 2019 (last updated November 27, 2024)
app/system/admin/admin/index.class.php in MetInfo 7.0.0beta allows a CSRF attack to add a user account via a doSaveSetup action to admin/index.php, as demonstrated by an admin/?n=admin&c=index&a=doSaveSetup URI.
0
Attacker Value
Unknown
CVE-2019-17553
Disclosure Date: October 14, 2019 (last updated November 27, 2024)
An issue was discovered in MetInfo v7.0.0 beta. There is SQL Injection via the admin/?n=tags&c=index&a=doSaveTags URI.
0
