CVE-2018-12530 | BDVDB-2026-102766 Detail

Description#

An issue was discovered in MetInfo 6.0.0. admin/app/batch/csvup.php allows remote attackers to delete arbitrary files via a flienamecsv=../ directory traversal. This can be exploited via CSRF.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://github.com/summ3rf/Vulner/blob/master/Metinfo.md

Exploit#

No public exploit known

History#

Version 12018-06-18Record published in the CVE List.
Version 22024-08-05Most recent update recorded in the CVE List.