← All advisories

High severity8.8NVD Advisory· Published Jul 19, 2019· Updated Jun 17, 2026

CVE-2019-13969

CVE-2019-13969

Description

Metinfo 6.x allows SQL Injection via the id parameter in an admin/index.php?n=ui_set&m=admin&c=index&a=doget_text_content&table=lang&field=1 request.

Affected products

3

Metinfo/Metinfollm-fuzzy2 versions
6.x+ 1 more
- (no CPE)range: 6.x
- cpe:2.3:a:metinfo:metinfo:*:*:*:*:*:*:*:*range: >=6.0.0,<=6.2.0
Metinfo/Metinfodescription

Patches

Vulnerability mechanics

References

1

github.com/zhuxianjin/vuln_repo/blob/master/Metinfo%206.x%20Background%20SQL%20injection.mdnvdExploitThird Party Advisory

News mentions

0

No linked articles in our index yet.