İçeriğe atla
Noroxi

metinfo kayıtları

metinfo üreticisine ait 60 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
0 · %0
Pre-auth RCE
4
Düzeltme kaydı olan
%0
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Yıllara göre kayıt

  1. 17
  2. 18
  3. 19
  4. 20
  5. 21
  6. 22
  7. 25
  8. 26

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

60 kayıt
  • CVE-2019-16997
    43Planlayın

    In Metinfo 7.0.0beta, a SQL Injection was discovered in app/system/language/admin/language_general.class.php via the admin/?n=language&c=lan

    YüksekCVSS 7,2Kavram kanıtıEPSS %49

    metinfo · metinfo30 Eyl 2019

  • CVE-2019-17418
    43Planlayın

    An issue was discovered in MetInfo 7.0.

    YüksekCVSS 7,2Kavram kanıtıEPSS %49

    metinfo · metinfo9 Eki 2019

  • CVE-2020-19305
    40Planlayın

    An issue in /app/system/column/admin/index.class.php of Metinfo v7.0.0 causes the indeximg parameter to be deleted when the column is delete

    KritikCVSS 9,8İstismar yokEPSS %2

    metinfo · metinfo3 Ağu 2021

  • CVE-2020-21132
    40Planlayın

    SQL Injection vulnerability in Metinfo 7.0.0beta in index.php.

    KritikCVSS 9,8İstismar yokEPSS %1

    metinfo · metinfo12 Tem 2021

  • CVE-2020-21133
    40Planlayın

    SQL Injection vulnerability in Metinfo 7.0.0 beta in member/getpassword.php?lang=cn&a=dovalid.

    KritikCVSS 9,8İstismar yokEPSS %1

    metinfo · metinfo12 Tem 2021

  • CVE-2020-21127
    39İzleyin

    MetInfo 7.0.0 contains a SQL injection vulnerability via admin/?n=logs&c=index&a=dodel.

    KritikCVSS 9,8İstismar yokEPSS %1

    metinfo · metinfo15 Eyl 2021

  • CVE-2018-12531
    39İzleyin

    An issue was discovered in MetInfo 6.0.0.

    KritikCVSS 9,8İstismar yokEPSS %1

    metinfo · metinfo18 Haz 2018

  • CVE-2022-22295
    39İzleyin

    Metinfo v7.5.0 was discovered to contain a SQL injection vulnerability in parameter_admin.class.php via the table_para parameter.

    KritikCVSS 9,8İstismar yokEPSS %1

    metinfo · metinfo14 Şub 2022

  • CVE-2022-23335
    39İzleyin

    Metinfo v7.5.0 was discovered to contain a SQL injection vulnerability in language_general.class.php via doModifyParameter.

    KritikCVSS 9,8İstismar yokEPSS %1

    metinfo · metinfo14 Şub 2022

  • CVE-2020-18175
    39İzleyin

    SQL Injection vulnerability in Metinfo 6.1.3 via a dosafety_emailadd action in basic.php.

    KritikCVSS 9,8İstismar yokEPSS %1

    metinfo · metinfo30 Tem 2021

  • CVE-2020-20800
    39İzleyin

    An issue was discovered in MetInfo v7.0.0 beta.

    KritikCVSS 9,8İstismar yokEPSS %1

    metinfo · metinfo30 Eyl 2020

  • CVE-2019-17553
    39İzleyin

    An issue was discovered in MetInfo v7.0.0 beta.

    KritikCVSS 9,8İstismar yokEPSS %1

    metinfo · metinfo14 Eki 2019

  • CVE-2026-29014
    38İzleyin

    MetInfo CMS Unauthenticated PHP Code Injection RCE

    KritikCVSS 9,3Kavram kanıtıEPSS %4

    metinfo · metinfo1 Nis 2026

  • CVE-2020-20907
    37İzleyin

    MetInfo 7.0 beta is affected by a file modification vulnerability.

    KritikCVSS 9,1İstismar yokEPSS %2

    metinfo · metinfo24 May 2021

  • CVE-2017-11347
    36İzleyin

    Authenticated Code Execution Vulnerability in MetInfo 5.3.17 allows a remote authenticated attacker to generate a PHP script with the conten

    YüksekCVSS 8,8İstismar yokEPSS %1

    metinfo · metinfo17 Tem 2017

  • CVE-2018-9934
    35İzleyin

    The reset-password feature in MetInfo 6.0 allows remote attackers to change arbitrary passwords via vectors involving a Host HTTP header tha

    YüksekCVSS 8,8İstismar yokEPSS %1

    metinfo · metinfo10 Nis 2018

  • CVE-2019-13969
    35İzleyin

    Metinfo 6.x allows SQL Injection via the id parameter in an admin/index.php?n=ui_set&m=admin&c=index&a=doget_text_content&table=lang&field=1

    YüksekCVSS 8,8İstismar yokEPSS %1

    metinfo · metinfo19 Tem 2019

  • CVE-2020-18157
    35İzleyin

    Cross Site Request Forgery (CSRF) vulnerability in MetInfo 6.1.3 via a doaddsave action in admin/index.php.

    YüksekCVSS 8,8İstismar yokEPSS %0

    metinfo · metinfo30 Tem 2021

  • CVE-2017-12789
    35İzleyin

    Metinfo 5.3.18 is affected by: Cross Site Request Forgery (CSRF).

    YüksekCVSS 8,8İstismar yokEPSS %0

    metinfo · metinfo10 May 2019

  • CVE-2020-21126
    35İzleyin

    MetInfo 7.0.0 contains a Cross-Site Request Forgery (CSRF) via admin/?n=admin&c=index&a=doSaveInfo.

    YüksekCVSS 8,8İstismar yokEPSS %0

    metinfo · metinfo15 Eyl 2021

  • CVE-2019-17676
    35İzleyin

    app/system/admin/admin/index.class.php in MetInfo 7.0.0beta allows a CSRF attack to add a user account via a doSaveSetup action to admin/ind

    YüksekCVSS 8,8İstismar yokEPSS %0

    metinfo · metinfo17 Eki 2019

  • CVE-2018-14420
    35İzleyin

    MetInfo 6.0.0 allows a CSRF attack to add a user account via a doaddsave action to admin/index.php, as demonstrated by an admin/index.php?an

    YüksekCVSS 8,8İstismar yokEPSS %0

    metinfo · metinfo19 Tem 2018

  • CVE-2022-44849
    35İzleyin

    A Cross-Site Request Forgery (CSRF) in the Administrator List of MetInfo v7.7 allows attackers to arbitrarily add Super Administrator accoun

    YüksekCVSS 8,8İstismar yokEPSS %0

    metinfo · metinfo6 Ara 2022

  • CVE-2019-16996
    32İzleyin

    In Metinfo 7.0.0beta, a SQL Injection was discovered in app/system/product/admin/product_admin.class.php via the admin/?n=product&c=product_

    YüksekCVSS 7,2Kavram kanıtıEPSS %12

    metinfo · metinfo30 Eyl 2019

  • CVE-2018-7271
    32İzleyin

    An issue was discovered in MetInfo 6.0.0.

    YüksekCVSS 8,1İstismar yokEPSS %1

    metinfo · metinfo20 Şub 2018