CVE-2018-18892

2018-11-0101:29:00

Google

osv.dev

7.4 High

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

73.6%

JSON

MiniCMS 1.10 allows execution of arbitrary PHP code via the install.php sitename parameter, which affects the site_name field in mc_conf.php.

CPENameOperatorVersion
minicmseq1.8
minicmseq1.7
minicmseq1.4
minicmseq1.5
minicmseq1.9
minicmseq1.10
minicmseq1.3
minicmseq1.2
minicmseq1.0
minicmseq1.6

Name	Operator	Version
minicms	eq	1.8
minicms	eq	1.7
minicms	eq	1.4
minicms	eq	1.5
minicms	eq	1.9
minicms	eq	1.10
minicms	eq	1.3
minicms	eq	1.2
minicms	eq	1.0
minicms	eq	1.6

Rows per page:

1-10 of 111

References

github.com/AvaterXXX/MiniCms/blob/master/Command%20Execution.md

www.patec.cn/newsshow.php?cid=24&id=135