CVE-2017-11347: Metinfo

High severity, CVSS 8.8. EPSS: 1.7% chance of exploitation in the next 30 days.

Authenticated Code Execution Vulnerability in MetInfo 5.3.17 allows a remote authenticated attacker to generate a PHP script with the content of a malicious image, related to admin/include/common.inc.php and admin/app/physical/physical.php.

Affected products

• Metinfo Metinfo: version 5.3.17 only

Published 2017-07-17. Last modified 2026-06-17.