CVE-2020-20907

Name of the Vulnerable Software and Affected Versions: MetInfo version 7.0 beta

Description: The issue allows attackers to delete and modify ini files in specific locations, including app/system/language/admin/language general.class.php and app/system/include/function/file.func.php.

Recommendations: For MetInfo version 7.0 beta, consider restricting access to the vulnerable files until a patch is available. As a temporary workaround, restrict modifications to ini files in the affected locations to minimize the risk of exploitation.