Show filters
22 Total Results
Displaying 1-10 of 22
Sort by:
Attacker Value
Unknown
CVE-2021-33387
Disclosure Date: February 24, 2023 (last updated October 08, 2023)
Cross Site Scripting Vulnerability in MiniCMS v.1.10 allows attacker to execute arbitrary code via a crafted get request.
0
Attacker Value
Unknown
CVE-2020-17999
Disclosure Date: April 28, 2021 (last updated February 22, 2025)
Cross Site Scripting (XSS) in MiniCMS v1.10 allows remote attackers to execute arbitrary code by injecting commands via a crafted HTTP request to the component "/mc-admin/post-edit.php".
0
Attacker Value
Unknown
CVE-2020-36051
Disclosure Date: January 05, 2021 (last updated February 22, 2025)
Directory traversal vulnerability in page_edit.php in MiniCMS V1.10 allows remote attackers to read arbitrary files via the state parameter.
0
Attacker Value
Unknown
CVE-2020-36052
Disclosure Date: January 05, 2021 (last updated February 22, 2025)
Directory traversal vulnerability in post-edit.php in MiniCMS V1.10 allows remote attackers to include and execute arbitrary files via the state parameter.
0
Attacker Value
Unknown
CVE-2019-13340
Disclosure Date: July 05, 2019 (last updated November 27, 2024)
In MiniCMS V1.10, stored XSS was found in mc-admin/post-edit.php via the content box. An attacker can use it to get a user's cookie. This is different from CVE-2018-10296, CVE-2018-16233, CVE-2018-20520, and CVE-2019-13186.
0
Attacker Value
Unknown
CVE-2019-13339
Disclosure Date: July 05, 2019 (last updated November 27, 2024)
In MiniCMS V1.10, stored XSS was found in mc-admin/page-edit.php (content box), which can be used to get a user's cookie.
0
Attacker Value
Unknown
CVE-2019-13341
Disclosure Date: July 05, 2019 (last updated November 27, 2024)
In MiniCMS V1.10, stored XSS was found in mc-admin/conf.php (comment box), which can be used to get a user's cookie.
0
Attacker Value
Unknown
CVE-2019-13186
Disclosure Date: July 03, 2019 (last updated November 27, 2024)
In MiniCMS V1.10, stored XSS was found in mc-admin/post-edit.php via the tags box. An attacker can use it to get a user's cookie. This is different from CVE-2018-10296, CVE-2018-16233, and CVE-2018-20520.
0
Attacker Value
Unknown
CVE-2019-9603
Disclosure Date: March 06, 2019 (last updated November 27, 2024)
MiniCMS 1.10 allows mc-admin/post.php?state=publish&delete= CSRF to delete articles, a different vulnerability than CVE-2018-18891.
0
Attacker Value
Unknown
CVE-2018-20520
Disclosure Date: December 27, 2018 (last updated November 27, 2024)
MiniCMS V1.10 has XSS via the mc-admin/post-edit.php query string, a related issue to CVE-2018-10296 and CVE-2018-16233.
0
