MetInfo 8.0.0
Approved changes feed: RSS · Atom
cpe:2.3:a:metinfo:metinfo:8.0.0:*:*:*:*:*:*:*part: a version: 8.0.0 update: *
| Vendor | Metinfo (1999263b-84e8-5e08-bcdf-9aa589e5d114) |
|---|---|
| Product | Metinfo (30736aac-abc8-5329-a46a-a3d0d37b7942) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from purl2cpe mapping
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/metinfo/metinfo |
purl2cpe | 2026-08-13 06:19:49.605090 |
pkg:github/source-hunter/metinfo |
purl2cpe | 2026-08-13 06:19:49.605092 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-29014 |
vulnerable | 2026-06-08 07:55:16.010592 |
MetInfo CMS Unauthenticated PHP Code Injection RCE
CRITICAL (9.8)
MetInfo CMS versions 7.9, 8.0, and 8.1 contain an unauthenticated PHP code injection vulnerability that allows remote attackers to execute arbitrary code by sending crafted requests with malicious PHP code. Attackers can exploit insufficient input neutralization in the execution path to achieve remote code execution and gain full control over the affected server.
Published: 2026-04-01T12:22:42.420Z
Updated: 2026-07-14T18:39:51.919Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-60454 |
vulnerable | 2026-06-08 07:37:26.921404 |
Details available
A stored Cross-Site Scripting (XSS) vulnerability has been discovered in MetInfo CMS version 8.0. The vulnerability exists in the image management module, specifically in the app\system\img\admin\img_admin.class.php component. The vulnerability allows attackers to upload malicious SVG files containing JavaScript code that executes when the uploaded file is viewed or accessed by users.
Published: 2025-10-03T00:00:00.000Z
Updated: 2025-10-03T15:46:31.530Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-60453 |
vulnerable | 2026-06-08 07:37:26.920953 |
Details available
A stored Cross-Site Scripting (XSS) vulnerability has been discovered in MetInfo CMS version 8.0. The vulnerability exists in the column management module, specifically in the app\system\column\admin\index.class.php component. The vulnerability allows attackers to upload malicious SVG files containing JavaScript code that executes when the uploaded file is viewed or accessed by users.
Published: 2025-10-03T00:00:00.000Z
Updated: 2025-10-03T14:29:30.416Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-60452 |
vulnerable | 2026-06-08 07:37:26.914029 |
Details available
A stored Cross-Site Scripting (XSS) vulnerability has been discovered in MetInfo CMS version 8.0. The vulnerability exists in the download management module, specifically in the app\system\download\admin\download_admin.class.php component. The vulnerability allows attackers to upload malicious SVG files containing JavaScript code that executes when the uploaded file is viewed or accessed by users.
Published: 2025-10-03T00:00:00.000Z
Updated: 2025-10-03T14:28:26.819Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-60451 |
vulnerable | 2026-06-08 07:37:26.913656 |
Details available
A stored Cross-Site Scripting (XSS) vulnerability has been discovered in MetInfo CMS version 8.0. The vulnerability exists due to insufficient validation and sanitization of SVG file uploads in the app\system\include\module\uploadify.class.php component, specifically in the website settings module. This security flaw allows attackers to upload malicious SVG files containing JavaScript code that executes when the uploaded file is viewed or accessed.
Published: 2025-10-03T00:00:00.000Z
Updated: 2025-10-03T14:26:51.802Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-60450 |
vulnerable | 2026-06-08 07:37:26.913081 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.