Show filters
19 Total Results
Displaying 11-19 of 19
Sort by:
Attacker Value
Unknown
CVE-2020-21517
Disclosure Date: June 21, 2021 (last updated February 22, 2025)
Cross Site Scripting (XSS) vulnerability in MetInfo 7.0.0 via the gourl parameter in login.php.
0
Attacker Value
Unknown
CVE-2020-20907
Disclosure Date: May 24, 2021 (last updated February 22, 2025)
MetInfo 7.0 beta is affected by a file modification vulnerability. Attackers can delete and modify ini files in app/system/language/admin/language_general.class.php and app/system/include/function/file.func.php.
0
Attacker Value
Unknown
CVE-2020-20800
Disclosure Date: September 30, 2020 (last updated February 22, 2025)
An issue was discovered in MetInfo v7.0.0 beta. There is SQL Injection via the install/index.php?action=adminsetup&cndata=yes&endata=yes&showdata=yes URI.
0
Attacker Value
Unknown
CVE-2019-17676
Disclosure Date: October 17, 2019 (last updated November 27, 2024)
app/system/admin/admin/index.class.php in MetInfo 7.0.0beta allows a CSRF attack to add a user account via a doSaveSetup action to admin/index.php, as demonstrated by an admin/?n=admin&c=index&a=doSaveSetup URI.
0
Attacker Value
Unknown
CVE-2019-17553
Disclosure Date: October 14, 2019 (last updated November 27, 2024)
An issue was discovered in MetInfo v7.0.0 beta. There is SQL Injection via the admin/?n=tags&c=index&a=doSaveTags URI.
0
Attacker Value
Unknown
CVE-2019-17419
Disclosure Date: October 10, 2019 (last updated November 27, 2024)
An issue was discovered in MetInfo 7.0. There is SQL injection via the admin/?n=user&c=admin_user&a=doGetUserInfo id parameter.
0
Attacker Value
Unknown
CVE-2019-17418
Disclosure Date: October 10, 2019 (last updated November 27, 2024)
An issue was discovered in MetInfo 7.0. There is SQL injection via the admin/?n=language&c=language_general&a=doSearchParameter appno parameter, a different issue than CVE-2019-16997.
0
Attacker Value
Unknown
CVE-2019-16996
Disclosure Date: September 30, 2019 (last updated November 27, 2024)
In Metinfo 7.0.0beta, a SQL Injection was discovered in app/system/product/admin/product_admin.class.php via the admin/?n=product&c=product_admin&a=dopara&app_type=shop id parameter.
0
Attacker Value
Unknown
CVE-2019-16997
Disclosure Date: September 30, 2019 (last updated November 27, 2024)
In Metinfo 7.0.0beta, a SQL Injection was discovered in app/system/language/admin/language_general.class.php via the admin/?n=language&c=language_general&a=doExportPack appno parameter.
0
