CVE-2018-12531

PoC —

CVSS 3.0

9.8 critical

EPSS

2%p74

Published

Jun 18, 2018 (Jun 18, 2018)

Modified

Jun 17, 2026

Description

An issue was discovered in MetInfo 6.0.0. install\index.php allows remote attackers to write arbitrary PHP code into config_db.php, a different vulnerability than CVE-2018-7271.

Vendors: metinfo
Products: metinfo
Weakness: CWE-94
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (1.6%)

In the news0 stories

No ingested article mentions this CVE yet.