MetInfo 6.1.3 has XSS via the admin/index.php?a=dogetpassword abt_type parameter.
References
Link | Resource |
---|---|
https://github.com/m3lon/XSS-Expoit/blob/master/METINFO_XSS.md | Exploit Third Party Advisory |
Configurations
Information
Published : 2018-11-06 20:29
Updated : 2018-12-07 13:28
NVD link : CVE-2018-19051
Mitre link : CVE-2018-19051
JSON object : View
CWE
CWE-79
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Products Affected
metinfo
- metinfo