cve/2020/CVE-2020-19305.md

CVE-2020-19305

Description

An issue in /app/system/column/admin/index.class.php of Metinfo v7.0.0 causes the indeximg parameter to be deleted when the column is deleted, allowing attackers to escalate privileges.

POC

Reference

• https://github.com/MRdoulestar/CodeAnalyse/issues/2
• https://github.com/MRdoulestar/CodeAnalyse/issues/2

Github

• https://github.com/Live-Hack-CVE/CVE-2020-19305
• https://github.com/MRdoulestar/MRdoulestar