References https://developer.aliyun.com/article/708791 https://mochazz.github.io/2019/07/04/metinfo6.2%E4%BB%BB%E6%84%8F%E6%96%87%E4%BB%B6%E4%B8%8A%E4%BC%A0%E6%BC%8F%E6%B4%9E/ https://cloud.tencent.com/developer/article/1472525 https://cn.t00ls.com/articles-22947.html https://www.secevery.com/toBugInfo?id=1866398681513377794 https://www.cnblogs.com/-qing-/p/10889467.html https://github.com/Qclover/Code-Audit/issues/2 https://avd.aliyun.com/product?prod=metinfo&page=2
Related VulnerabilitiesMetInfo CMS /app/system/entrance.php 代码执行漏洞(CVE-2026-29014)PoCCVE-2026-29014: MetInfo CMS <= 8.1 - Remote Code ExecutionMetInfo CMS CVE-2026-29014 PHP代码执行CVE-2019-16996: Metinfo 7.0.0beta SQL InjectCVE-2019-16997: Metinfo sql injectCVE-2019-17418: Metinfo sql injectPoCCVE-2019-16996: Metinfo 7.0.0 beta - SQL InjectionPoCCVE-2019-16997: Metinfo 7.0.0 beta - SQL InjectionPoCCVE-2019-17418: MetInfo 7.0.0 beta - SQL InjectionPoCCNVD-2018-13393: Metinfo file readPoCCNVD-2018-13393: Metinfo - Local File InclusionPoCmetinfo-file-read: Metinfo file readMetInfo /app/system/entrance.php 任意文件上传漏洞