AvaterXXX/Metinfo---XSS

AvaterXXX/Metinfo---XSS

Unavailable

This project is no longer available (or publicly accessible) from GitHub

Releases0

Log in to subscribe

CVE History

CVE	Published	CVSS v3	CVSS v2
CVE-2018-14419 ↗	Jul 20, 2018Friday, 20 July 2018, 01:29	—	3.5 LOW
MetInfo 6.0.0 allows XSS via a modified name of the navigation bar on the home page.
CVE-2018-14420 ↗	Jul 20, 2018Friday, 20 July 2018, 01:29	—	6.8 MEDIUM
MetInfo 6.0.0 allows a CSRF attack to add a user account via a doaddsave action to admin/index.php, as demonstrated by an admin/index.php?anyid=47&n=admin&c=admin_admin&a=doaddsave URI.