Skip to content
OpenAdvisories

Vendor

MetInfo

1 known vulnerabilities.

Products

1 result · Clear filters · Feed

  • High 7.5

    MetInfo CMS < 6.1.1 Unauthenticated Path Traversal via thumb.php dir Parameter

    MetInfo CMS 6.0.0 before 6.1.1 contains a path traversal vulnerability in /include/thumb.php that allows unauthenticated attackers to read arbitrary files via the dir parameter. Attackers can send crafted requests with backslash sequences bypassing the str_re…