Filtered by vendor Metinfo Project
Subscriptions
Total
4 CVE
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2017-11715 | 1 Metinfo Project | 1 Metinfo | 2024-08-05 | N/A |
| job/uploadfile_save.php in MetInfo through 5.3.17 blocks the .php extension but not related extensions, which might allow remote authenticated admins to execute arbitrary PHP code by uploading a .phtml file after certain actions involving admin/system/safe.php and job/cv.php. | ||||
| CVE-2017-11718 | 1 Metinfo Project | 1 Metinfo | 2024-08-05 | N/A |
| There is URL Redirector Abuse in MetInfo through 5.3.17 via the gourl parameter to member/login.php. | ||||
| CVE-2017-11716 | 1 Metinfo Project | 1 Metinfo | 2024-08-05 | N/A |
| MetInfo through 5.3.17 allows stored XSS via HTML Edit Mode. | ||||
| CVE-2017-11717 | 1 Metinfo Project | 1 Metinfo | 2024-08-05 | N/A |
| MetInfo through 5.3.17 accepts the same CAPTCHA response for 120 seconds, which makes it easier for remote attackers to bypass intended challenge requirements by modifying the client-server data stream, as demonstrated by the login/findpass page. | ||||
Page 1 of 1.