CVE-2020-36051

2021-01-0522:15:14

Google

osv.dev

7.2 High

AI Score

Confidence

Low

0.018 Low

EPSS

Percentile

88.2%

JSON

Directory traversal vulnerability in page_edit.php in MiniCMS V1.10 allows remote attackers to read arbitrary files via the state parameter.

CPENameOperatorVersion
minicmseq1.9
minicmseq1.2
minicmseq1.3
minicmseq1.6
minicmseq1.4
minicmseq1.7
minicmseq1.0
minicmseq1.10
minicmseq1.1
minicmseq1.8

Name	Operator	Version
minicms	eq	1.9
minicms	eq	1.2
minicms	eq	1.3
minicms	eq	1.6
minicms	eq	1.4
minicms	eq	1.7
minicms	eq	1.0
minicms	eq	1.10
minicms	eq	1.1
minicms	eq	1.8

Rows per page:

1-10 of 111

References

github.com/bg5sbk/MiniCMS/issues/39