CVE-2021-44970: Improper Neutralization of Input During Web Page Generation

MiniCMS v1.11 was discovered to contain a cross-site scripting XSS vulnerability via /mc-admin/page-edit.php...

PT-2022-12273

Name of the Vulnerable Software and Affected Versions MiniCMS version 1.11 Description A cross-site scripting XSS issue was found in MiniCMS via the /mc-admin/page-edit.php API endpoint. This allows for potential malicious script execution. Recommendations For MiniCMS version 1.11, as a temporary...

MiniCMS Cross-Site Script Vulnerabilities

MiniCMS is a content management system CMS designed for personal websites. miniCMS has a security vulnerability that stems from the lack of proper validation of client-side data in the WEB application, which can be exploited by attackers to execute client-side code...

CVE-2020-17999

Cross Site Scripting XSS in MiniCMS v1.10 allows remote attackers to execute arbitrary code by injecting commands via a crafted HTTP request to the component "/mc-admin/post-edit.php"...

CVE-2020-17999

Cross Site Scripting XSS in MiniCMS v1.10 allows remote attackers to execute arbitrary code by injecting commands via a crafted HTTP request to the component "/mc-admin/post-edit.php"...

Cross site scripting

Cross Site Scripting XSS in MiniCMS v1.10 allows remote attackers to execute arbitrary code by injecting commands via a crafted HTTP request to the component "/mc-admin/post-edit.php"...

CVE-2020-17999

CVE-2020-17999 – MiniCMS v1.10 XSS . Description across multiple sources confirms a Cross Site Scripting vulnerability in MiniCMS v1.10, where remote attackers can inject commands via a crafted HTTP request to the component "/mc-admin/post-edit.php" to execute arbitrary code. The affected product...

CVE-2020-17999

Cross Site Scripting XSS in MiniCMS v1.10 allows remote attackers to execute arbitrary code by injecting commands via a crafted HTTP request to the component "/mc-admin/post-edit.php"...

CVE-2020-17999: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting XSS in MiniCMS v1.10 allows remote attackers to execute arbitrary code by injecting commands via a crafted HTTP request to the component "/mc-admin/post-edit.php"...

PT-2021-10115

Name of the Vulnerable Software and Affected Versions: MiniCMS version 1.10 Description: The issue allows remote attackers to execute arbitrary code by injecting commands via a crafted HTTP request to the "/mc-admin/post-edit.php" API endpoint. This is a result of a Cross Site Scripting XSS flaw...

File Inclusion Vulnerability in MiniCMS Content Management System

MiniCMS content management system is a popular software under Php source channel. A file inclusion vulnerability exists in Minicms, which can be exploited by an attacker to gain control of the server...

MiniCMS Directory Traversal Vulnerability

MiniCMS is a micro content management system designed for personal websites. A directory traversal vulnerability exists in post-edit.php in MiniCMS V1.10. A remote attacker can exploit this vulnerability to include and execute arbitrary files via the state parameter...

MiniCMS Directory Traversal Vulnerability (CNVD-2021-02038)

MiniCMS is a micro content management system designed for personal websites. A directory traversal vulnerability exists in pageedit.php in MiniCMS V1.10. A remote attacker can exploit this vulnerability to read arbitrary files via the state parameter...

CVE-2020-36051

Directory traversal vulnerability in pageedit.php in MiniCMS V1.10 allows remote attackers to read arbitrary files via the state parameter...

CVE-2020-36052

Directory traversal vulnerability in post-edit.php in MiniCMS V1.10 allows remote attackers to include and execute arbitrary files via the state parameter...

CVE-2020-36052

Directory traversal vulnerability in post-edit.php in MiniCMS V1.10 allows remote attackers to include and execute arbitrary files via the state parameter...

CVE-2020-36051

Directory traversal vulnerability in pageedit.php in MiniCMS V1.10 allows remote attackers to read arbitrary files via the state parameter...

Directory traversal

Directory traversal vulnerability in post-edit.php in MiniCMS V1.10 allows remote attackers to include and execute arbitrary files via the state parameter...

CVE-2020-36052

Directory traversal vulnerability in post-edit.php in MiniCMS V1.10 allows remote attackers to include and execute arbitrary files via the state parameter...

CVE-2020-36051

Directory traversal vulnerability in pageedit.php in MiniCMS V1.10 allows remote attackers to read arbitrary files via the state parameter...