CVE-2023-46378

The CVE-2023-46378 entry refers to a Stored Cross-Site Scripting (XSS) vulnerability in MiniCMS 1.1.1 where a crafted string appended to /mc-admin/conf.php can cause arbitrary code execution. The issue is repeatedly described across multiple databases (NVD, CNVD, CNNVD, OSV, CVE List) as an XSS f...

CVE-2023-46378: Improper Neutralization of Input During Web Page Generation

Stored Cross Site Scripting XSS vulnerability in MiniCMS 1.1.1 allows attackers to run arbitrary code via crafted string appended to /mc-admin/conf.php...

CVE-2023-46378

Stored Cross Site Scripting XSS vulnerability in MiniCMS 1.1.1 allows attackers to run arbitrary code via crafted string appended to /mc-admin/conf.php...

CVE-2021-33387

Cross Site Scripting Vulnerability in MiniCMS v.1.10 allows attacker to execute arbitrary code via a crafted get request...

CVE-2021-33387

Cross Site Scripting Vulnerability in MiniCMS v.1.10 allows attacker to execute arbitrary code via a crafted get request...

Cross site scripting

Cross Site Scripting Vulnerability in MiniCMS v.1.10 allows attacker to execute arbitrary code via a crafted get request...

PT-2023-12209

Name of the Vulnerable Software and Affected Versions MiniCMS version 1.10 Description The issue allows an attacker to execute arbitrary code via a crafted get request, specifically through a Cross Site Scripting vulnerability. Recommendations For MiniCMS version 1.10, update to a version that...

CVE-2021-33387

Cross Site Scripting Vulnerability in MiniCMS v.1.10 allows attacker to execute arbitrary code via a crafted get request...

CVE-2021-33387

CVE-2021-33387 is a Cross Site Scripting vulnerability in MiniCMS v1.10 that allows an attacker to execute arbitrary code through a crafted GET request. Related sources (NVD/NIST, Red Hat, OSV, CVE listings) consistently describe MiniCMS-1.10 as vulnerable to XSS with high impact (confidentiality...

CVE-2021-33387

Cross Site Scripting Vulnerability in MiniCMS v.1.10 allows attacker to execute arbitrary code via a crafted get request...

MiniCMS cross-site scripting vulnerability

MiniCMS is the minimalist content management system for personal websites. A security vulnerability exists in MiniCMS version v.1.10 that originates from allowing an unauthenticated attacker to execute arbitrary code via a crafted get request...

CVE-2021-33387: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting Vulnerability in MiniCMS v.1.10 allows attacker to execute arbitrary code via a crafted get request...

CVE-2020-19896

File inclusion vulnerability in Minicms v1.9 allows remote attackers to execute arbitary PHP code via post-edit.php...

CVE-2020-19896

File inclusion vulnerability in Minicms v1.9 allows remote attackers to execute arbitary PHP code via post-edit.php...

CVE-2020-19896

File inclusion vulnerability in Minicms v1.9 allows remote attackers to execute arbitary PHP code via post-edit.php...

CVE-2020-19896

CVE-2020-19896 affects Minicms v1.9 and is a file inclusion vulnerability that lets remote attackers execute arbitrary PHP code via the file post-edit.php. The NVD metrics indicate a CVSSv3.1 base score of 9.8 (CRITICAL) with network access, low attack complexity, no user interaction, and impacts...

CVE-2020-19896

File inclusion vulnerability in Minicms v1.9 allows remote attackers to execute arbitary PHP code via post-edit.php...

MiniCMS Cross-Site Request Forgery Vulnerability (CNVD-2022-62184)

MiniCMS is content management system. A cross-site request forgery vulnerability exists in MiniCMS v1.11. An attacker can exploit this vulnerability to delete any local .dat file by clicking a malicious link...

CVE-2020-19896: Undefined Security Weakness

File inclusion vulnerability in Minicms v1.9 allows remote attackers to execute arbitary PHP code via post-edit.php...

PT-2022-8604

Name of the Vulnerable Software and Affected Versions Minicms version 1.9 Description The issue allows remote attackers to execute arbitrary PHP code. This is achieved via a file inclusion vulnerability in the post-edit.php file. Recommendations For Minicms version 1.9, consider restricting acces...