CVE-2018-10423

2018-04-2605:29:00

Google

osv.dev

4.2 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

40.4%

JSON

mc-admin/post.php in MiniCMS 1.10 allows remote attackers to obtain a directory listing of the top-level directory of the web root via a link that becomes available after posting an article.

CPENameOperatorVersion
minicmseq1.8
minicmseq1.7
minicmseq1.4
minicmseq1.5
minicmseq1.9
minicmseq1.10
minicmseq1.3
minicmseq1.2
minicmseq1.0
minicmseq1.6