MetInfo has 3 CVEs on record between 2021 and 2026. 1 was published in the last 90 days. The median CVSS is 7.5 (high).
CVEs per month
Last 12 months, by publish date
1125/111225/120126/010226/020326/030426/040526/050626/060726/070826/080926/091026/10
- Exploited share
- 0% vs 1% corpus
- Median CVSS
- 7.5
- Publish → KEV
- —
- Last 90 days
- 1 prev 0
3
Total CVEs
0
Critical
0
CISA KEV
0
Exploited
Worst active — by depth score
CVE-2020-20585High· 7.5A blind SQL injection in /admin/?n=logs&c=index&a=dode of Metinfo 7.0 beta allows attackers to access sensitive database information.42CVE-2018-25439High· 7.5MetInfo CMS < 6.1.1 Unauthenticated Path Traversal via thumb.php dir Parameter41CVE-2020-21517Medium· 6.1Cross Site Scripting (XSS) vulnerability in MetInfo 7.0.0 via the gourl parameter in login.php.34
MetInfo vulnerabilities
CVEs affecting MetInfo, newest first. Open any entry for full detail, references, and exploit status.
3 CVEsRSS
CVE-2018-25439High· 7.5MetInfo CMS < 6.1.1 Unauthenticated Path Traversal via thumb.php dir Parameter
MetInfo CMS 6.0.0 before 6.1.1 contains a path traversal vulnerability in /include/thumb.php that allows unauthenticated attackers to read arbitrary files via the dir parameter. Attackers can send crafted requests with backslash sequence…
▾ TwilightMetInfo · MetInfovia CVEORG
CVE-2020-20585High· 7.5A blind SQL injection in /admin/?n=logs&c=index&a=dode of Metinfo 7.0 beta allows attackers to access sensitive database information.
A blind SQL injection in /admin/?n=logs&c=index&a=dode of Metinfo 7.0 beta allows attackers to access sensitive database information.
▾ Twilightmetinfo · metinfoEPSS 1.7%via NVD
CVE-2020-21517Medium· 6.1Cross Site Scripting (XSS) vulnerability in MetInfo 7.0.0 via the gourl parameter in login.php.
Cross Site Scripting (XSS) vulnerability in MetInfo 7.0.0 via the gourl parameter in login.php.
▾ Sunlitmetinfo · metinfoEPSS 0.95%via NVD