CVE-2018-19051: XSS
Published Nov 7, 2018
·Updated
MetInfo 6.1.3 has XSS via the admin/index.php?a=dogetpassword abttype parameter.
Affected Software
1 affected component
Metinfo Metinfo=6.1.3
Event History
Nov 7, 2018
CVE Published
via MITRE·04:00 AM
Data Sourced
via MITRE·04:00 AM
Description
Frequently Asked Questions
1
What is CVE-2018-19051?
CVE-2018-19051 is a vulnerability in MetInfo 6.1.3 that allows for cross-site scripting (XSS) attacks.
2
How can CVE-2018-19051 be exploited?
CVE-2018-19051 can be exploited by an attacker using the admin/index.php?a=dogetpassword abt_type parameter.
3
What is the severity of CVE-2018-19051?
CVE-2018-19051 has a severity rating of medium (6.1).
4
How can I fix CVE-2018-19051?
To fix CVE-2018-19051, it is recommended to update MetInfo to a version that is not affected by this vulnerability.
5
Where can I find more information about CVE-2018-19051?
More information about CVE-2018-19051 can be found at the following link: [https://github.com/m3lon/XSS-Expoit/blob/master/METINFO_XSS.md](https://github.com/m3lon/XSS-Expoit/blob/master/METINFO_XSS.md)