Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

metinfo/metinfo

              master @ ce77e08
            

Fixes

CVEs

CRITICAL

Peak severity

14.3%

Coverage

Highlights

Multiple: 3 prior fixes. Scrutinize any change in this area.

app/system/include/class/common.class.php: most-fixed (5 issues). Treat as high-risk during review.

7 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

SQL Injection: Five fixes in this file address SQL injection via unsanitized input reaching DB::query, indicating a central, repeatedly exploited weakness in query construction.

SQL Injection: The database abstraction layer itself was patched for SQL injection, implying the vulnerability exists in low-level query helpers used across the application.

Multiple: Multiple 'Multiple' fixes bundle SQLi, XSS, and file upload issues, showing that a single entry point in common.class.php exposes several attack surfaces simultaneously.