Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

CVE-2020-20907: MetInfo 7.0 beta is affected by a file modification vulnerability. Attackers can delete and modify ini files in app/system/language/admin/language_general.class.php and app/system/include/function/...

CVE-2020-20907 · published 5 years ago

Summary

MetInfo 7.0 beta is affected by a file modification vulnerability. Attackers can delete and modify ini files in app/system/language/admin/language_general.class.php and app/system/include/function/file.func.php.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software

Vendor	Product	Affected versions
metinfo	metinfo	7.0.0 `cpe:2.3:a:metinfo:metinfo:7.0.0:beta::::::`

Original advisory text

References

https://cwe.mitre.org/data/definitions/23.html Third Party Advisory
https://github.com/cby234/cve_request/issues/1 Exploit Issue Tracking Third Party Advisory
https://github.com/cby234/cve_request/issues/2 Exploit Issue Tracking Third Party Advisory

Fix within

Internet-facing 14 days

Internal 60 days

Not known to be exploited
Can be exploited automatically (estimated)
Gives an attacker partial control (estimated)

Severity

9.1 Critical

Exploitation

2% chance of attack within 30 days

Type

CWE-22Path Traversal

Timeline

Published24 May 2021

Updated4 Nov 2026

First seen29 Sep 2026

Sources

CVE-2020-20907 · NVD

Track software like this

Free during beta