Security Advisory

CVE-2019-7718

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2019-02-11 03:00:00

Last updated 2024-09-17 03:59:13

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

An issue was discovered in Metinfo 6.x. An attacker can leverage a race condition in the backend database backup function to execute arbitrary PHP code via admin/index.php?n=databack&c=index&a=dogetsql&tables=<?php and admin/databack/bakup_tables.php?2=file_put_contents URIs because app/system/databack/admin/index.class.php creates bakup_tables.php temporarily.

← Browse all CVEs View on cve.org ↗