359 matches found
CVE-2018-16233
MiniCMS V1.10 has XSS via the mc-admin/post-edit.php tags parameter...
CVE-2018-16233
MiniCMS V1.10 has XSS via the mc-admin/post-edit.php tags parameter...
CVE-2018-16233
Technical details for CVE-2018-16233 are not publicly available in the provided documents. Monitor for updates from vendors and security advisories.
CVE-2018-16233: Improper Neutralization of Input During Web Page Generation
MiniCMS V1.10 has XSS via the mc-admin/post-edit.php tags parameter...
PT-2018-13446
Name of the Vulnerable Software and Affected Versions MiniCMS version 1.10 Description The issue allows for XSS via the tags parameter in the "mc-admin/post-edit.php" endpoint. Recommendations For MiniCMS version 1.10, avoid using the tags parameter in the "mc-admin/post-edit.php" endpoint until...
CVE-2018-15899
An issue was discovered in MiniCMS 1.10. There is a post.php?date= XSS vulnerability...
CVE-2018-15899
An issue was discovered in MiniCMS 1.10. There is a post.php?date= XSS vulnerability...
Spoofing
An issue was discovered in MiniCMS 1.10. There is a post.php?date= XSS vulnerability...
CVE-2018-15899
An issue was discovered in MiniCMS 1.10. There is a post.php?date= XSS vulnerability...
CVE-2018-15899
CVE-2018-15899 concerns a cross-site scripting (XSS) vulnerability in MiniCMS 1.10. The issue is triggered via the date parameter in the post.php file (post.php?date=), allowing remote attackers to inject arbitrary web script or HTML. Public descriptions across multiple sources (NVD, CNVD) confir...
CVE-2018-15899: Improper Neutralization of Input During Web Page Generation
An issue was discovered in MiniCMS 1.10. There is a post.php?date= XSS vulnerability...
MiniCMS Cross-Site Scripting Vulnerability (CNVD-2018-18140)
MiniCMS is a mini content management system CMS designed for personal websites. A cross-site scripting vulnerability exists in the post.php file in MiniCMS version 1.10. The vulnerability can be exploited by remote attackers to inject arbitrary web script or HTML with the help of the 'date'...
PT-2018-13279
Name of the Vulnerable Software and Affected Versions MiniCMS version 1.10 Description An issue was discovered in MiniCMS. There is a post.php?date= XSS vulnerability. Recommendations For MiniCMS version 1.10, update to a version that fixes the XSS vulnerability in the post.php endpoint,...
CVE-2018-1000638
MiniCMS version 1.1 contains a Cross Site Scripting XSS vulnerability in http://example.org/mc-admin/page.php?date=payload that can result in code injection...
CVE-2018-1000638
MiniCMS version 1.1 contains a Cross Site Scripting XSS vulnerability in http://example.org/mc-admin/page.php?date=payload that can result in code injection...
Cross site scripting
MiniCMS version 1.1 contains a Cross Site Scripting XSS vulnerability in http://example.org/mc-admin/page.php?date=payload that can result in code injection...
CVE-2018-1000638
MiniCMS version 1.1 contains a Cross Site Scripting XSS vulnerability in http://example.org/mc-admin/page.php?date=payload that can result in code injection...
CVE-2018-1000638
CVE-2018-1000638 affects MiniCMS 1.1 with a Cross-Site Scripting (XSS) vulnerability in the URL parameter mc-admin/page.php?date={payload}. The vulnerability allows injection when the GET parameter date is echoed without proper encoding, per multiple sources, including exploit references with PoC...
CVE-2018-1000638: Improper Neutralization of Input During Web Page Generation
MiniCMS version 1.1 contains a Cross Site Scripting XSS vulnerability in http://example.org/mc-admin/page.php?date=payload that can result in code injection...
PT-2018-9491
Name of the Vulnerable Software and Affected Versions MiniCMS version 1.1 Description The issue is related to a Cross Site Scripting XSS vulnerability. It affects the "http://example.org/mc-admin/page.php?date=payload" endpoint, where payload can be used for code injection. Recommendations For...