phantom0301/vulns

Releases0

CVE History

CVE	Published	CVSS v3	CVSS v2
CVE-2017-14513 ↗	Sep 17, 2017Sunday, 17 September 2017, 21:29	—	5 MEDIUM
Directory traversal vulnerability in MetInfo 5.3.17 allows remote attackers to read information from any ini format file via the f_filename parameter in a fingerprintdo action to admin/app/physical/physical.php.
CVE-2017-9764 ↗	Jul 19, 2017Wednesday, 19 July 2017, 12:29	—	4.3 MEDIUM
Cross-site scripting (XSS) vulnerability in MetInfo 5.3.17 allows remote attackers to inject arbitrary web script or HTML via the Client-IP or X-Forwarded-For HTTP header to /include/stat/stat.php in a para action.