PT-2020-6287 · Metinfo · Metinfo

Mrdoulestar · Published 2020-01-15 · Updated 2022-10-05 · CVE-2020-19305

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Metinfo version 7.0.0

Description The issue is related to a lack of access control in the /app/system/column/admin/index.class.php script of the Metinfo CMS system. This allows a remote attacker to escalate privileges by exploiting the vulnerability. Specifically, when a column is deleted, the indeximg parameter is also deleted, which can be used to gain elevated access.

Recommendations For Metinfo version 7.0.0, consider disabling access to the /app/system/column/admin/index.class.php script until a patch is available to prevent exploitation of the indeximg parameter. Restricting access to this script can help minimize the risk of privilege escalation.

Exploit

Fix

Improper Access Control

Path traversal

Weakness Enumeration

CWE-284

CWE-22

Related Identifiers

BDU:2021-03931

CVE-2020-19305

Affected Products

Metinfo

References · 7

• 🔥 https://github.com/MRdoulestar/CodeAnalyse/issues/2 · Exploit
• https://osv.dev/vulnerability/CVE-2020-19305 · Vendor Advisory
• https://bdu.fstec.ru/vul/2021-03931 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2020-19305 · Security Note
• https://vuldb.com/?id.179998 · Note
• https://cwe.mitre.org/data/definitions/36.html · Note
• https://t.me/cvenotify/18605 · Telegram Post