What’s Vulnerable › Vulnerabilities

CVE-2018-7271

• Severity: high (CVSS 8.1 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.6% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2018-02-21 · updated 2026-06-17
• Weakness: CWE-94

Description

An issue was discovered in MetInfo 6.0.0. In install/install.php in the installation process, the config/config_db.php configuration file filtering is not rigorous: one can insert malicious code in the installation process to execute arbitrary commands or obtain a web shell.

Affected products

• MetInfo CMS: 6.0.0

References

• https://github.com/SQYY/CVE/blob/master/MetInfo_G.txt
• https://github.com/SQYY/CVE/blob/master/MetInfo_G.txt

Get alerted when CVE-2018-7271 or the next vulnerability affects your stack