Approved changes feed: RSS · Atom

cpe:2.3:a:metinfo:metinfo:7.0.0:-:*:*:*:*:*:*

part: a version: 7.0.0 update: -

VendorMetinfo (1999263b-84e8-5e08-bcdf-9aa589e5d114)
ProductMetinfo (30736aac-abc8-5329-a46a-a3d0d37b7942)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/metinfo/metinfo purl2cpe 2026-06-01 10:16:05.089788
pkg:github/source-hunter/metinfo purl2cpe 2026-06-01 10:16:05.089789

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2020-21517 vulnerable 2026-06-08 05:22:30.862412 Details available
Cross Site Scripting (XSS) vulnerability in MetInfo 7.0.0 via the gourl parameter in login.php.
Published: 2021-06-21T14:55:02.000Z
Updated: 2026-07-09T00:10:00.548Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-21127 vulnerable 2026-06-08 05:22:30.716396 Details available
MetInfo 7.0.0 contains a SQL injection vulnerability via admin/?n=logs&c=index&a=dodel.
Published: 2021-09-15T16:16:48.000Z
Updated: 2024-08-04T14:22:25.603Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-21126 vulnerable 2026-06-08 05:22:30.715749 Details available
MetInfo 7.0.0 contains a Cross-Site Request Forgery (CSRF) via admin/?n=admin&c=index&a=doSaveInfo.
Published: 2021-09-15T16:16:47.000Z
Updated: 2024-08-04T14:22:25.543Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-20981 vulnerable 2026-06-08 05:22:30.632762 Details available
A SQL injection in the /admin/?n=logs&c=index&a=dolist component of Metinfo 7.0 allows attackers to access sensitive database information.
Published: 2021-08-12T14:49:21.000Z
Updated: 2024-08-04T14:22:25.551Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-19305 vulnerable 2026-06-08 05:20:57.271448 Details available
An issue in /app/system/column/admin/index.class.php of Metinfo v7.0.0 causes the indeximg parameter to be deleted when the column is deleted, allowing attackers to escalate privileges.
Published: 2021-08-03T21:24:52.000Z
Updated: 2024-08-04T14:08:30.798Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.