ME
Product
MetInfo
61
CVEs
0
On KEV
9.8
Max CVSS
1
New 30D
Severity mix
Critical 12High 23Medium 25Low 0
Watch
Add MetInfo to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2018-9985 | 6.1 | Apr 10 | The front page of MetInfo 6.0 allows XSS by sending a feedback message to an administrator Affected: 6.0.0 |
| CVE-2018-9928 | 6.1 | Apr 10 | Cross-site scripting (XSS) vulnerability in save.php in MetInfo 6.0 allows remote attackers to inject arbitrary web script or HTML via the webname or weburl parameter Affected: 6.0.0 |
| CVE-2018-7721 | 6.1 | Mar 7 | Cross Site Scripting (XSS) exists in MetInfo 6.0.0 via /feedback/index.php because app/system/feedback/web/feedback.class.php mishandles input data Affected: 6.0.0 |
| CVE-2017-9764 | 6.1 | Jul 19 | Cross-site scripting (XSS) vulnerability in MetInfo 5.3.17 allows remote attackers to inject arbitrary web script or HTML via the Client-IP or X-Forwarded-For HTTP header to… Affected: 5.3.17 |
| CVE-2020-20600 | 5.4 | Dec 22 | MetInfo 7.0 beta contains a stored cross-site scripting (XSS) vulnerability in the $name parameter of admin/?n=column&c=index&a=doAddColumn Affected: 7.0.0 |
| CVE-2018-18374 | 5.4 | Oct 16 | XSS exists in the MetInfo 6.1.2 admin/index.php page via the anyid parameter Affected: 6.1.2 |
| CVE-2017-6878 | 5.4 | Mar 27 | Cross-site scripting (XSS) vulnerability in MetInfo 5.3.15 allows remote authenticated users to inject arbitrary web script or HTML via the name_2 parameter to… Affected: 5.3.15 |
| CVE-2017-14513 | 5.3 | Sep 17 | Directory traversal vulnerability in MetInfo 5.3.17 allows remote attackers to read information from any ini format file via the f_filename parameter in a fingerprintdo action to… Affected: 5.3.17 |
| CVE-2018-17129 | 4.9 | Sep 17 | MetInfo 6.1.0 has SQL injection in doexport() in app/system/feedback/admin/feedback_admin.class.php via the class1 field Affected: 6.1.0 |
| CVE-2018-14419 | 4.8 | Jul 20 | MetInfo 6.0.0 allows XSS via a modified name of the navigation bar on the home page Affected: 6.0.0 |
| CVE-2010-4976 | – | Nov 1 | Cross-site scripting (XSS) vulnerability in search/search.php in MetInfo 3.0 allows remote attackers to inject arbitrary web script or HTML via the searchword parameter (aka… Affected: 3.0 |