Metinfo CVE-2017-11716

MEDIUM

Cross-site Scripting (XSS) (CWE-79)

2017-07-28 cve@mitre.org

6.1

CVSS 3.0 · NVD

Share

Severity by source

NVD PRIMARY

6.1 MEDIUM

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

Required

Scope

Changed

Confidentiality

Low

Integrity

Low

Availability

None

Lifecycle Timeline

1

CVE Published

Jul 28, 2017 - 05:29 cve.org

MEDIUM 6.1

DescriptionCVE.org

MetInfo through 5.3.17 allows stored XSS via HTML Edit Mode.

AnalysisAI

MetInfo through 5.3.17 allows stored XSS via HTML Edit Mode. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Technical ContextAI

This vulnerability is classified as Cross-Site Scripting (XSS) (CWE-79), which allows attackers to inject malicious scripts into web pages viewed by other users. Affected products include: Metinfo Project Metinfo. Version information: through 5.3.17.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Sanitize all user input, use Content-Security-Policy headers, encode output contextually (HTML, JS, URL). Use frameworks with built-in XSS protection.

More in Metinfo

View all

CVE-2017-11715 CRITICAL Act Now POC

job/uploadfile_save.php in MetInfo through 5.3.17 blocks the .php extension but not related extensions, which might allo

CVE-2020-20800 CRITICAL Act Now POC

An issue was discovered in MetInfo v7.0.0 beta. Rated critical severity (CVSS 9.8), this vulnerability is remotely explo

CVE-2019-17553 CRITICAL Act Now POC

An issue was discovered in MetInfo v7.0.0 beta. Rated critical severity (CVSS 9.8), this vulnerability is remotely explo

CVE-2018-12531 CRITICAL Act Now POC

An issue was discovered in MetInfo 6.0.0. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable

CVE-2022-44849 HIGH This Week POC

A Cross-Site Request Forgery (CSRF) in the Administrator List of MetInfo v7.7 allows attackers to arbitrarily add Super

CVE-2019-17676 HIGH This Week POC

app/system/admin/admin/index.class.php in MetInfo 7.0.0beta allows a CSRF attack to add a user account via a doSaveSetup

CVE-2019-13969 HIGH This Week POC

Metinfo 6.x allows SQL Injection via the id parameter in an admin/index.php?n=ui_set&m=admin&c=index&a=doget_text_conten

CVE-2018-14420 HIGH This Week POC

MetInfo 6.0.0 allows a CSRF attack to add a user account via a doaddsave action to admin/index.php, as demonstrated by a

CVE-2018-9934 HIGH This Week POC

The reset-password feature in MetInfo 6.0 allows remote attackers to change arbitrary passwords via vectors involving a

CVE-2019-7718 HIGH This Week POC

An issue was discovered in Metinfo 6.x. Rated high severity (CVSS 8.1), this vulnerability is remotely exploitable, no a

CVE-2018-7271 HIGH This Week POC

An issue was discovered in MetInfo 6.0.0. Rated high severity (CVSS 8.1), this vulnerability is remotely exploitable, no

CVE-2020-20585 HIGH This Week POC

A blind SQL injection in /admin/?n=logs&c=index&a=dode of Metinfo 7.0 beta allows attackers to access sensitive database

Same weakness CWE-79 – Cross-site Scripting (XSS)

View all

CVE-2013-7389 MEDIUM POC

CVE-2021-25299 MEDIUM POC

CVE-2014-2120 MEDIUM

CVE-2023-40000 HIGH POC

CVE-2016-8581 MEDIUM POC

CVE-2013-5223 MEDIUM POC

CVE-2025-52367 MEDIUM POC

CVE-2015-0072 MEDIUM POC

Same technique XSS

View all

CVE-2017-9248 CRITICAL POC

CVE-2013-1710 CRITICAL POC

CVE-2013-7389 MEDIUM POC

CVE-2021-25299 MEDIUM POC

CVE-2014-2120 MEDIUM

CVE-2023-40000 HIGH POC

CVE-2024-52875 HIGH POC

CVE-2016-8581 MEDIUM POC

Share

CVE-2017-11716 vulnerability details – vuln.today

Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy