Login Request a demo
ME
Vendor
MetInfo
1 product with CVEs on record
61
CVEs
0
On KEV
1
New 30D
Products
ME
MetInfo
MetInfo
9.8
61 CVEs0 on KEV1 new
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2018-25439
New
ME
MetInfo
MetInfo
7.5
0%
Oct 22MetInfo CMS < 6.1.1 Unauthenticated Path Traversal via thumb.php dir Parameter
CVE-2026-29014
ME
Metinfo
Metinfo
9.8
39%
Apr 1MetInfo CMS Unauthenticated PHP Code Injection RCE
CVE-2025-63551
ME
Metinfo
Metinfo
7.5
1%
Nov 6A Server-Side Request Forgery (SSRF) vulnerability, achievable through an XML External Entity (XXE) injection, exists in MetInfo Content Management System (CMS) thru 8.1
CVE-2025-60452
ME
Metinfo
Metinfo
6.1
0%
Oct 3A stored Cross-Site Scripting (XSS) vulnerability has been discovered in MetInfo CMS version 8.0
CVE-2025-60450
ME
Metinfo
Metinfo
6.1
0%
Oct 3A stored Cross-Site Scripting (XSS) vulnerability has been discovered in MetInfo CMS version 8.0
CVE-2025-60451
ME
Metinfo
Metinfo
6.1
0%
Oct 3A stored Cross-Site Scripting (XSS) vulnerability has been discovered in MetInfo CMS version 8.0
CVE-2025-60454
ME
Metinfo
Metinfo
6.1
0%
Oct 3A stored Cross-Site Scripting (XSS) vulnerability has been discovered in MetInfo CMS version 8.0
CVE-2025-60453
ME
Metinfo
Metinfo
6.1
0%
Oct 3A stored Cross-Site Scripting (XSS) vulnerability has been discovered in MetInfo CMS version 8.0
CVE-2022-44849
ME
Metinfo
Metinfo
8.8
0%
Dec 7A Cross-Site Request Forgery (CSRF) in the Administrator List of MetInfo v7.7 allows attackers to arbitrarily add Super Administrator account
CVE-2022-23335
ME
Metinfo
Metinfo
9.8
2%
Feb 14Metinfo v7.5.0 was discovered to contain a SQL injection vulnerability in language_general.class.php via doModifyParameter
CVE-2022-22295
ME
Metinfo
Metinfo
9.8
2%
Feb 14Metinfo v7.5.0 was discovered to contain a SQL injection vulnerability in parameter_admin.class.php via the table_para parameter
CVE-2020-20600
ME
Metinfo
Metinfo
5.4
1%
Dec 22MetInfo 7.0 beta contains a stored cross-site scripting (XSS) vulnerability in the $name parameter of admin/?n=column&c=index&a=doAddColumn
CVE-2020-21127
ME
Metinfo
Metinfo
9.8
2%
Sep 15MetInfo 7.0.0 contains a SQL injection vulnerability via admin/?n=logs&c=index&a=dodel
CVE-2020-21126
ME
Metinfo
Metinfo
8.8
1%
Sep 15MetInfo 7.0.0 contains a Cross-Site Request Forgery (CSRF) via admin/?n=admin&c=index&a=doSaveInfo
CVE-2020-20981
ME
Metinfo
Metinfo
7.5
1%
Aug 12A SQL injection in the /admin/?n=logs&c=index&a=dolist component of Metinfo 7.0 allows attackers to access sensitive database information
CVE-2020-19305
ME
Metinfo
Metinfo
9.8
2%
Aug 3An issue in /app/system/column/admin/index.class.php of Metinfo v7.0.0 causes the indeximg parameter to be deleted when the column is deleted, allowing attackers to escalate…
CVE-2020-19304
ME
Metinfo
Metinfo
7.5
2%
Aug 3An issue in /admin/index.php?n=system&c=filept&a=doGetFileList of Metinfo v7.0.0 allows attackers to perform a directory traversal and access sensitive information
CVE-2020-18175
ME
Metinfo
Metinfo
9.8
2%
Jul 30SQL Injection vulnerability in Metinfo 6.1.3 via a dosafety_emailadd action in basic.php
CVE-2020-18157
ME
Metinfo
Metinfo
8.8
1%
Jul 30Cross Site Request Forgery (CSRF) vulnerability in MetInfo 6.1.3 via a doaddsave action in admin/index.php
CVE-2020-21133
ME
Metinfo
Metinfo
9.8
2%
Jul 12SQL Injection vulnerability in Metinfo 7.0.0 beta in member/getpassword.php?lang=cn&a=dovalid
CVE-2020-21132
ME
Metinfo
Metinfo
9.8
2%
Jul 12SQL Injection vulnerability in Metinfo 7.0.0beta in index.php
CVE-2020-21131
ME
Metinfo
Metinfo
7.2
1%
Jul 12SQL Injection vulnerability in MetInfo 7.0.0beta via admin/?n=language&c=language_web&a=doAddLanguage
CVE-2020-20585
ME
Metinfo
Metinfo
7.5
2%
Jul 8A blind SQL injection in /admin/?n=logs&c=index&a=dode of Metinfo 7.0 beta allows attackers to access sensitive database information
CVE-2020-21517
ME
Metinfo
Metinfo
6.1
1%
Jun 21Cross Site Scripting (XSS) vulnerability in MetInfo 7.0.0 via the gourl parameter in login.php
CVE-2020-20907
ME
Metinfo
Metinfo
9.1
2%
May 24MetInfo 7.0 beta is affected by a file modification vulnerability
CVE-2020-20800
ME
Metinfo
Metinfo
9.8
2%
Sep 30An issue was discovered in MetInfo v7.0.0 beta
CVE-2019-17676
ME
Metinfo
Metinfo
8.8
1%
Oct 17app/system/admin/admin/index.class.php in MetInfo 7.0.0beta allows a CSRF attack to add a user account via a doSaveSetup action to admin/index.php, as demonstrated by an…
CVE-2019-17553
ME
Metinfo
Metinfo
9.8
2%
Oct 14An issue was discovered in MetInfo v7.0.0 beta
CVE-2019-17419
ME
Metinfo
Metinfo
7.2
1%
Oct 10An issue was discovered in MetInfo 7.0
CVE-2019-17418
ME
Metinfo
Metinfo
7.2
48%
Oct 10An issue was discovered in MetInfo 7.0
CVE-2019-16997
ME
Metinfo
Metinfo
7.2
48%
Sep 30In Metinfo 7.0.0beta, a SQL Injection was discovered in app/system/language/admin/language_general.class.php via the admin/?n=language&c=language_general&a=doExportPack appno…
CVE-2019-16996
ME
Metinfo
Metinfo
7.2
12%
Sep 30In Metinfo 7.0.0beta, a SQL Injection was discovered in app/system/product/admin/product_admin.class.php via the admin/?n=product&c=product_admin&a=dopara&app_type=shop id…
CVE-2019-13969
ME
Metinfo
Metinfo
8.8
1%
Jul 19Metinfo 6.x allows SQL Injection via the id parameter in an admin/index.php?n=ui_set&m=admin&c=index&a=doget_text_content&table=lang&field=1 request
CVE-2017-12789
ME
Metinfo
Metinfo
8.8
1%
May 10Metinfo 5.3.18 is affected by: Cross Site Request Forgery (CSRF)
CVE-2017-12790
ME
Metinfo
Metinfo
6.5
1%
May 9Metinfo 5.3.18 is affected by: Cross Site Request Forgery (CSRF)
CVE-2017-12788
ME
Metinfo
Metinfo
6.1
1%
May 9Multiple cross-site scripting (XSS) vulnerabilities in admin/index.php in Metinfo 5.3.18 allows remote attackers to inject arbitrary web script or HTML via the (1) class1…
CVE-2019-7718
ME
Metinfo
Metinfo
8.1
1%
Feb 11An issue was discovered in Metinfo 6.x
CVE-2018-20486
ME
Metinfo
Metinfo
6.1
1%
Dec 26MetInfo 6.x through 6.1.3 has XSS via the /admin/login/login_check.php url_array[] parameter
CVE-2018-19836
ME
Metinfo
Metinfo
6.1
1%
Dec 3In Metinfo 6.1.3, include/interface/applogin.php allows setting arbitrary HTTP headers (including the Cookie header), and common.inc.php allows registering variables from the…
CVE-2018-19835
ME
Metinfo
Metinfo
6.1
1%
Dec 3Metinfo 6.1.3 has reflected XSS via the admin/column/move.php lang_columnerr4 parameter
CVE-2018-19051
ME
Metinfo
Metinfo
6.1
1%
Nov 7MetInfo 6.1.3 has XSS via the admin/index.php?a=dogetpassword abt_type parameter
CVE-2018-19050
ME
Metinfo
Metinfo
6.1
1%
Nov 7MetInfo 6.1.3 has XSS via the admin/index.php?a=dogetpassword langset parameter
CVE-2018-18374
ME
Metinfo
Metinfo
5.4
1%
Oct 16XSS exists in the MetInfo 6.1.2 admin/index.php page via the anyid parameter
CVE-2018-18296
ME
Metinfo
Metinfo
6.1
1%
Oct 15MetInfo 6.1.2 has XSS via the /admin/index.php bigclass parameter in an n=column&a=doadd action
CVE-2018-17129
ME
Metinfo
Metinfo
4.9
1%
Sep 17MetInfo 6.1.0 has SQL injection in doexport() in app/system/feedback/admin/feedback_admin.class.php via the class1 field
CVE-2018-14420
ME
Metinfo
Metinfo
8.8
1%
Jul 20MetInfo 6.0.0 allows a CSRF attack to add a user account via a doaddsave action to admin/index.php, as demonstrated by an…
CVE-2018-14419
ME
Metinfo
Metinfo
4.8
1%
Jul 20MetInfo 6.0.0 allows XSS via a modified name of the navigation bar on the home page
CVE-2018-13024
ME
Metinfo
Metinfo
7.2
1%
Jun 29Metinfo v6.0.0 allows remote attackers to write code into a .php file, and execute that code, via the module parameter to admin/column/save.php in an editor upload action
CVE-2018-12531
ME
Metinfo
Metinfo
9.8
2%
Jun 18An issue was discovered in MetInfo 6.0.0
CVE-2018-12530
ME
Metinfo
Metinfo
6.5
2%
Jun 18An issue was discovered in MetInfo 6.0.0
CVE-2018-9985
ME
Metinfo
Metinfo
6.1
1%
Apr 10The front page of MetInfo 6.0 allows XSS by sending a feedback message to an administrator
CVE-2018-9934
ME
Metinfo
Metinfo
8.8
1%
Apr 10The reset-password feature in MetInfo 6.0 allows remote attackers to change arbitrary passwords via vectors involving a Host HTTP header that is modified to specify a web server…
CVE-2018-9928
ME
Metinfo
Metinfo
6.1
1%
Apr 10Cross-site scripting (XSS) vulnerability in save.php in MetInfo 6.0 allows remote attackers to inject arbitrary web script or HTML via the webname or weburl parameter
CVE-2018-7721
ME
Metinfo
Metinfo
6.1
1%
Mar 7Cross Site Scripting (XSS) exists in MetInfo 6.0.0 via /feedback/index.php because app/system/feedback/web/feedback.class.php mishandles input data
CVE-2018-7271
ME
Metinfo
Metinfo
8.1
2%
Feb 21An issue was discovered in MetInfo 6.0.0
CVE-2017-14513
ME
Metinfo
Metinfo
5.3
2%
Sep 17Directory traversal vulnerability in MetInfo 5.3.17 allows remote attackers to read information from any ini format file via the f_filename parameter in a fingerprintdo action to…
CVE-2017-11500
ME
Metinfo
Metinfo
7.5
2%
Jul 20A directory traversal vulnerability exists in MetInfo 5.3.17
CVE-2017-9764
ME
Metinfo
Metinfo
6.1
1%
Jul 19Cross-site scripting (XSS) vulnerability in MetInfo 5.3.17 allows remote attackers to inject arbitrary web script or HTML via the Client-IP or X-Forwarded-For HTTP header to…
CVE-2017-11347
ME
Metinfo
Metinfo
8.8
2%
Jul 17Authenticated Code Execution Vulnerability in MetInfo 5.3.17 allows a remote authenticated attacker to generate a PHP script with the content of a malicious image, related to…
CVE-2017-6878
ME
Metinfo
Metinfo
5.4
1%
Mar 27Cross-site scripting (XSS) vulnerability in MetInfo 5.3.15 allows remote authenticated users to inject arbitrary web script or HTML via the name_2 parameter to…