359 matches found
CVE-2018-10296
MiniCMS V1.10 has XSS via the mc-admin/post-edit.php title parameter...
CVE-2018-10296
Technical details for CVE-2018-10296 are not publicly available in the provided documents. No concrete affected versions, root cause, or remediation are shown here. Monitor for updates in connected sources.
CVE-2018-10296
MiniCMS V1.10 has XSS via the mc-admin/post-edit.php title parameter...
CVE-2018-10296
MiniCMS V1.10 has XSS via the mc-admin/post-edit.php title parameter...
CVE-2018-10296: Improper Neutralization of Input During Web Page Generation
MiniCMS V1.10 has XSS via the mc-admin/post-edit.php title parameter...
PT-2018-9806
Name of the Vulnerable Software and Affected Versions: MiniCMS version 1.10 Description: The issue allows for XSS via the title parameter in the "mc-admin/post-edit.php" API endpoint. Recommendations: For MiniCMS version 1.10, avoid using the title parameter in the "mc-admin/post-edit.php" endpoi...
Design/Logic Flaw
MiniCMS v1.10 has XSS via the mc-admin/conf.php sitelink parameter...
CVE-2018-10227
MiniCMS v1.10 has XSS via the mc-admin/conf.php sitelink parameter...
CVE-2018-10227
MiniCMS v1.10 has XSS via the mc-admin/conf.php sitelink parameter...
CVE-2018-10227
MiniCMS v1.10 has XSS via the mc-admin/conf.php sitelink parameter...
CVE-2018-10227
CVE-2018-10227 affects MiniCMS v1.10. The vulnerability is an XSS flaw in the mc-admin/conf.php site_link parameter, allowing an attacker to inject script through that parameter to execute commands in the user context. No remediation details are provided in the supplied documents. Exploitation st...
CVE-2018-10227
MiniCMS v1.10 has XSS via the mc-admin/conf.php sitelink parameter...
CVE-2018-10227: Improper Neutralization of Input During Web Page Generation
MiniCMS v1.10 has XSS via the mc-admin/conf.php sitelink parameter...
PT-2018-9768
Name of the Vulnerable Software and Affected Versions: MiniCMS version 1.10 Description: The issue concerns a security problem where an attacker can execute malicious scripts. This is achieved through the site link parameter in the 'mc-admin/conf.php' endpoint. Recommendations: For MiniCMS versio...
MiniCMS 1.10 Cross Site Request Forgery
test document.forms0.submit;...
MiniCMS 1.10 - Cross-Site Request Forgery
MiniCMS 1.10 - Cross-Site Request Forgery test document.forms0.submit;...
MiniCMS 1.10 - Cross-Site Request Forgery
test document.forms0.submit;...
CVE-2018-9092
There is a CSRF vulnerability in mc-admin/conf.php in MiniCMS 1.10 that can change the administrator account password...