CVE-2020-19896: Undefined Security Weakness

File inclusion vulnerability in Minicms v1.9 allows remote attackers to execute arbitary PHP code via post-edit.php...

PT-2022-8604

Name of the Vulnerable Software and Affected Versions Minicms version 1.9 Description The issue allows remote attackers to execute arbitrary PHP code. This is achieved via a file inclusion vulnerability in the post-edit.php file. Recommendations For Minicms version 1.9, consider restricting acces...

CVE-2021-41663

A cross-site scripting XSS vulnerability exists in Mini CMS V1.11. The vulnerability exists in the article upload: post-edit.php page...

Cross site scripting

A cross-site scripting XSS vulnerability exists in Mini CMS V1.11. The vulnerability exists in the article upload: post-edit.php page...

CVE-2021-41663

A cross-site scripting XSS vulnerability exists in Mini CMS V1.11. The vulnerability exists in the article upload: post-edit.php page...

CVE-2021-41663

The CVE-2021-41663 issue affects Mini CMS v1.11, with the XSS vulnerability located in the article upload flow (post-edit.php). The root cause is described as lack of checksum filtering of user-supplied and output data on that page, enabling client-side JavaScript execution. The shared sources (R...

PT-2022-11460

Name of the Vulnerable Software and Affected Versions Mini CMS version 1.11 Description A cross-site scripting XSS issue exists in the article upload functionality, specifically on the post-edit.php page. Recommendations For Mini CMS version 1.11, update the post-edit.php page to properly sanitiz...

CVE-2021-41663: Improper Neutralization of Input During Web Page Generation

A cross-site scripting XSS vulnerability exists in Mini CMS V1.11. The vulnerability exists in the article upload: post-edit.php page...

PT-2022-20333

Name of the Vulnerable Software and Affected Versions Wedding Management System version 1.0 Description The issue is related to an arbitrary file upload vulnerability. This vulnerability is located in the picture upload point of the "photos edit.php" file. Recommendations For Wedding Management...

PT-2022-20341

Name of the Vulnerable Software and Affected Versions Wedding Management System version 1.0 Description The issue allows for SQL Injection via the adminpackage edit.php endpoint. This could potentially lead to unauthorized access or manipulation of data. Recommendations For Wedding Management...

PT-2022-20338

Name of the Vulnerable Software and Affected Versions Wedding Management System version 1.0 Description The issue concerns a SQL Injection vulnerability. It can be exploited via the adminblog events edit.php endpoint. The estimated number of potentially affected devices worldwide is not specified...

PT-2022-20336

Name of the Vulnerable Software and Affected Versions Wedding Management System version 1.0 Description The issue concerns an arbitrary file upload vulnerability located in the picture upload point of the "package edit.php" file within the "Services" module of the background management system. Th...

PT-2022-20335

Name of the Vulnerable Software and Affected Versions Wedding Management version 1.0 Description The issue is related to an arbitrary file upload vulnerability. This vulnerability is located in the picture upload point of the "users edit.php" file. Recommendations For Wedding Management version...

PT-2022-20347

Name of the Vulnerable Software and Affected Versions Wedding Management System version 1.0 Description The issue concerns a SQL Injection vulnerability. It can be exploited via the /Wedding-Management/admin/client edit.php API endpoint, specifically through the user id variable. Recommendations...

PT-2022-20344

Name of the Vulnerable Software and Affected Versions Wedding Management System version 1.0 Description The issue is related to SQL Injection, which can be exploited via the /admin/feature edit.php endpoint. Recommendations For Wedding Management System version 1.0, consider disabling access to t...

PT-2022-20343

Name of the Vulnerable Software and Affected Versions Wedding Management System version 1.0 Description The issue allows for SQL Injection via the adminusers edit.php endpoint. This could potentially lead to unauthorized access or manipulation of data. Recommendations For Wedding Management Syste...

PT-2022-20342

Name of the Vulnerable Software and Affected Versions Wedding Management System version 1.0 Description The issue is related to SQL Injection. It can be exploited via the "adminphotos edit.php" endpoint. Recommendations For Wedding Management System version 1.0, consider restricting access to the...

PT-2022-20332

Name of the Vulnerable Software and Affected Versions Wedding Management System version 1.0 Description The issue allows for SQL injection via the "/Wedding-Management/admin/blog events edit.php" API endpoint, specifically through the id variable. Recommendations For Wedding Management System...

PT-2022-20339

Name of the Vulnerable Software and Affected Versions Wedding Management System version 1.0 Description The issue concerns a SQL Injection vulnerability. It can be exploited via the adminclient edit.php endpoint. The estimated number of potentially affected devices worldwide is not specified. The...

GHSA-WCJ4-FF9M-5R7G ImpressCMS Path Traversal to Arbitrary File Delete

Absolute path traversal vulnerability in htdocs/libraries/image-editor/image-edit.php in ImpressCMS before 1.3.6 allows remote attackers to delete arbitrary files via a full pathname in the imagepath parameter in a cancel action...