Metinfo vulnerabilities

Products

• Metinfo 61

Newest

• metinfo MetInfo CMS < 6.1.1 Unauthenticated Path Traversal via thumb.php dir Parameter CVE-2018-25439 8.7 HighOctober 22, 2026
• metinfo, metinfo cms cms +1 more MetInfo CMS Unauthenticated PHP Code Injection RCE CVE-2026-29014 Public exploit EPSS 39.5% 9.3 CriticalApril 1, 2026
• metinfo A Server-Side Request Forgery (SSRF) vulnerability, achievable through an XML External Entity ... CVE-2025-63551 7.5 HighNovember 6, 2025
• metinfo A stored Cross-Site Scripting (XSS) vulnerability has been discovered in MetInfo CMS version 8.0.... CVE-2025-60454 6.1 MediumOctober 3, 2025
• metinfo A stored Cross-Site Scripting (XSS) vulnerability has been discovered in MetInfo CMS version 8.0.... CVE-2025-60453 6.1 MediumOctober 3, 2025
• metinfo A stored Cross-Site Scripting (XSS) vulnerability has been discovered in MetInfo CMS version 8.0.... CVE-2025-60452 6.1 MediumOctober 3, 2025
• metinfo A stored Cross-Site Scripting (XSS) vulnerability has been discovered in MetInfo CMS version 8.0.... CVE-2025-60451 6.1 MediumOctober 3, 2025
• metinfo A stored Cross-Site Scripting (XSS) vulnerability has been discovered in MetInfo CMS version 8.0.... CVE-2025-60450 6.1 MediumOctober 3, 2025
• metinfo A Cross-Site Request Forgery (CSRF) in the Administrator List of MetInfo v7.7 allows attackers to... CVE-2022-44849 8.8 HighDecember 7, 2022
• metinfo Metinfo v7.5.0 was discovered to contain a SQL injection vulnerability in language_general.class... CVE-2022-23335 9.8 CriticalFebruary 14, 2022
• metinfo Metinfo v7.5.0 was discovered to contain a SQL injection vulnerability in parameter_admin.class... CVE-2022-22295 9.8 CriticalFebruary 14, 2022
• metinfo MetInfo 7.0 beta contains a stored cross-site scripting (XSS) vulnerability in the $name... CVE-2020-20600 5.4 MediumDecember 22, 2021
• metinfo MetInfo 7.0.0 contains a SQL injection vulnerability via admin/?n=logs&c=index&a=dodel. CVE-2020-21127 9.8 CriticalSeptember 15, 2021
• metinfo MetInfo 7.0.0 contains a Cross-Site Request Forgery (CSRF) via admin/?n=admin&c=index&a=doSaveInfo. CVE-2020-21126 8.8 HighSeptember 15, 2021
• metinfo A SQL injection in the /admin/?n=logs&c=index&a=dolist component of Metinfo 7.0 allows attackers... CVE-2020-20981 7.5 HighAugust 12, 2021
• metinfo An issue in /app/system/column/admin/index.class.php of Metinfo v7.0.0 causes the indeximg... CVE-2020-19305 9.8 CriticalAugust 3, 2021
• metinfo An issue in /admin/index.php?n=system&c=filept&a=doGetFileList of Metinfo v7.0.0 allows attackers... CVE-2020-19304 7.5 HighAugust 3, 2021
• metinfo SQL Injection vulnerability in Metinfo 6.1.3 via a dosafety_emailadd action in basic.php. CVE-2020-18175 9.8 CriticalJuly 29, 2021
• metinfo Cross Site Request Forgery (CSRF) vulnerability in MetInfo 6.1.3 via a doaddsave action in admin... CVE-2020-18157 8.8 HighJuly 29, 2021
• metinfo SQL Injection vulnerability in Metinfo 7.0.0 beta in member/getpassword.php?lang=cn&a=dovalid. CVE-2020-21133 9.8 CriticalJuly 12, 2021
• metinfo SQL Injection vulnerability in Metinfo 7.0.0beta in index.php. CVE-2020-21132 9.8 CriticalJuly 12, 2021
• metinfo SQL Injection vulnerability in MetInfo 7.0.0beta via admin/?n=language&c=language_web&a... CVE-2020-21131 7.2 HighJuly 12, 2021
• metinfo A blind SQL injection in /admin/?n=logs&c=index&a=dode of Metinfo 7.0 beta allows attackers to... CVE-2020-20585 7.5 HighJuly 8, 2021
• metinfo Cross Site Scripting (XSS) vulnerability in MetInfo 7.0.0 via the gourl parameter in login.php. CVE-2020-21517 6.1 MediumJune 21, 2021
• metinfo MetInfo 7.0 beta is affected by a file modification vulnerability. Attackers can delete and... CVE-2020-20907 9.1 CriticalMay 24, 2021
• metinfo An issue was discovered in MetInfo v7.0.0 beta. There is SQL Injection via the install/index.php... CVE-2020-20800 9.8 CriticalSeptember 29, 2020
• metinfo app/system/admin/admin/index.class.php in MetInfo 7.0.0beta allows a CSRF attack to add a user... CVE-2019-17676 8.8 HighOctober 17, 2019
• metinfo An issue was discovered in MetInfo v7.0.0 beta. There is SQL Injection via the admin/?n=tags&c... CVE-2019-17553 9.8 CriticalOctober 14, 2019
• metinfo An issue was discovered in MetInfo 7.0. There is SQL injection via the admin/?n=language&c... CVE-2019-17418 EPSS 48.4% 7.2 HighOctober 9, 2019
• metinfo An issue was discovered in MetInfo 7.0. There is SQL injection via the admin/?n=user&c=admin_user... CVE-2019-17419 7.2 HighOctober 9, 2019
• metinfo In Metinfo 7.0.0beta, a SQL Injection was discovered in app/system/language/admin... CVE-2019-16997 EPSS 48.5% 7.2 HighSeptember 30, 2019
• metinfo In Metinfo 7.0.0beta, a SQL Injection was discovered in app/system/product/admin/product_admin... CVE-2019-16996 EPSS 12.1% 7.2 HighSeptember 30, 2019
• metinfo Metinfo 6.x allows SQL Injection via the id parameter in an admin/index.php?n=ui_set&m=admin&c... CVE-2019-13969 8.8 HighJuly 19, 2019
• metinfo Metinfo 5.3.18 is affected by: Cross Site Request Forgery (CSRF). The impact is: Information... CVE-2017-12789 8.8 HighMay 10, 2019
• metinfo Metinfo 5.3.18 is affected by: Cross Site Request Forgery (CSRF). The impact is: Information... CVE-2017-12790 6.5 MediumMay 9, 2019
• metinfo Multiple cross-site scripting (XSS) vulnerabilities in admin/index.php in Metinfo 5.3.18 allows... CVE-2017-12788 6.1 MediumMay 9, 2019
• metinfo An issue was discovered in Metinfo 6.x. An attacker can leverage a race condition in the backend... CVE-2019-7718 8.1 HighFebruary 11, 2019
• metinfo MetInfo 6.x through 6.1.3 has XSS via the /admin/login/login_check.php url_array[] parameter. CVE-2018-20486 6.1 MediumDecember 26, 2018
• metinfo In Metinfo 6.1.3, include/interface/applogin.php allows setting arbitrary HTTP headers (including... CVE-2018-19836 6.1 MediumDecember 3, 2018
• metinfo Metinfo 6.1.3 has reflected XSS via the admin/column/move.php lang_columnerr4 parameter. CVE-2018-19835 6.1 MediumDecember 3, 2018
• metinfo MetInfo 6.1.3 has XSS via the admin/index.php?a=dogetpassword abt_type parameter. CVE-2018-19051 6.1 MediumNovember 7, 2018
• metinfo MetInfo 6.1.3 has XSS via the admin/index.php?a=dogetpassword langset parameter. CVE-2018-19050 6.1 MediumNovember 7, 2018
• metinfo XSS exists in the MetInfo 6.1.2 admin/index.php page via the anyid parameter. CVE-2018-18374 5.4 MediumOctober 16, 2018
• metinfo MetInfo 6.1.2 has XSS via the /admin/index.php bigclass parameter in an n=column&a=doadd action. CVE-2018-18296 6.1 MediumOctober 15, 2018
• metinfo MetInfo 6.1.0 has SQL injection in doexport() in app/system/feedback/admin/feedback_admin.class... CVE-2018-17129 4.9 MediumSeptember 17, 2018
• metinfo MetInfo 6.0.0 allows a CSRF attack to add a user account via a doaddsave action to admin/index... CVE-2018-14420 8.8 HighJuly 19, 2018
• metinfo MetInfo 6.0.0 allows XSS via a modified name of the navigation bar on the home page. CVE-2018-14419 4.8 MediumJuly 19, 2018
• metinfo Metinfo v6.0.0 allows remote attackers to write code into a .php file, and execute that code, via... CVE-2018-13024 7.2 HighJune 29, 2018
• metinfo An issue was discovered in MetInfo 6.0.0. install\index.php allows remote attackers to write... CVE-2018-12531 9.8 CriticalJune 18, 2018
• metinfo An issue was discovered in MetInfo 6.0.0. admin/app/batch/csvup.php allows remote attackers to... CVE-2018-12530 6.5 MediumJune 18, 2018
• Show olderLoading…