CVE-2018-7271

Name of the Vulnerable Software and Affected Versions MetInfo version 6.0.0

Description An issue was discovered in the installation process of MetInfo, where the filtering of the config/config db.php configuration file is not rigorous. This allows an attacker to insert malicious code during the installation process, potentially leading to the execution of arbitrary commands or the obtainment of a web shell.

Recommendations For MetInfo version 6.0.0, as a temporary workaround, consider restricting access to the installation process and the config/config db.php file to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.