VYPR
← All advisories
High severity8.8NVD Advisory· Published Oct 17, 2019· Updated Jun 17, 2026

CVE-2019-17676

CVE-2019-17676

Description

app/system/admin/admin/index.class.php in MetInfo 7.0.0beta allows a CSRF attack to add a user account via a doSaveSetup action to admin/index.php, as demonstrated by an admin/?n=admin&c=index&a=doSaveSetup URI.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3
  • Metinfo/Metinfo2 versions
    cpe:2.3:a:metinfo:metinfo:7.0.0:beta:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:metinfo:metinfo:7.0.0:beta:*:*:*:*:*:*
    • (no CPE)range: = 7.0.0beta
  • MetInfo/MetInfodescription

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.