CVE-2018-20486

MetInfo 6.x through 6.1.3 has XSS via the /admin/login/login_check.php url_array[] parameter.

• CWE-79

• https://forum.metinfo.cn/thread-1300-1-1.htmlExploit, Vendor Advisory
• https://github.com/Ppsoft1990/Metinfo6.1.3/issues/2Exploit, Issue Tracking, Third Party Advisory
• https://forum.metinfo.cn/thread-1300-1-1.htmlExploit, Vendor Advisory
• https://github.com/Ppsoft1990/Metinfo6.1.3/issues/2Exploit, Issue Tracking, Third Party Advisory

Published

Dec 26, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-20480An issue was discovered in S-CMS 1.0. It allows SQL Injectio…
• CVE-2018-20481XRef::getEntry in XRef.cc in Poppler 0.72.0 mishandles unall…
• CVE-2018-20482GNU Tar through 1.30, when --sparse is used, mishandles file…4.7
• CVE-2018-20483set_file_metadata in xattr.c in GNU Wget before 1.20.1 store…
• CVE-2018-20484Zoho ManageEngine ADSelfService Plus 5.7 before build 5702 h…
• CVE-2018-20485Zoho ManageEngine ADSelfService Plus 5.7 before build 5702 h…
• CVE-2018-20487An issue was discovered in the firewall3 component in Inteno…
• CVE-2018-20488An issue was discovered in GitLab Community and Enterprise E…4.3
• CVE-2018-20489An issue was discovered in GitLab Community and Enterprise E…5.3
• CVE-2018-2049Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2018-20490An issue was discovered in GitLab Community and Enterprise E…5.4
• CVE-2018-20491An issue was discovered in GitLab Enterprise Edition 11.3.x …5.4