File Modification Vulnerability in MetInfo 7.0 Beta by cby234
CVE-2020-20907

9.1CRITICAL

Key Information:

Vendor: Metinfo
Status: Metinfo
Vendor: CVE Published:; 24 May 2021

What is CVE-2020-20907?

An identified vulnerability in MetInfo 7.0 beta allows attackers to perform unauthorized modifications to ini files located in critical directories. Specifically, the vulnerability enables the deletion and alteration of files in both 'app/system/language/admin/language_general.class.php' and 'app/system/include/function/file.func.php'. This could potentially compromise the integrity of the application and facilitate further exploitation, making it crucial for users to implement patches and updates promptly.