CVE-2018-20486: XSS
Published Dec 26, 2018
·Updated
MetInfo 6.x through 6.1.3 has XSS via the /admin/login/logincheck.php urlarray[] parameter.
Affected Software
1 affected component
Metinfo Metinfo>=6.0.0<=6.1.3
Event History
Dec 26, 2018
CVE Published
via MITRE·07:00 PM
Data Sourced
via MITRE·07:00 PM
Description
Frequently Asked Questions
1
What is the vulnerability ID for this MetInfo security issue?
The vulnerability ID for this MetInfo security issue is CVE-2018-20486.
2
What is the severity rating of CVE-2018-20486?
The severity rating of CVE-2018-20486 is medium (6.1).
3
How does CVE-2018-20486 manifest?
CVE-2018-20486 manifests as a cross-site scripting (XSS) vulnerability via the /admin/login/login_check.php url_array[] parameter.
4
Which versions of MetInfo are affected by CVE-2018-20486?
MetInfo versions 6.x through 6.1.3 are affected by CVE-2018-20486.
5
How can I fix CVE-2018-20486?
To fix CVE-2018-20486, it is recommended to update MetInfo to a version beyond 6.1.3.