Monstra CMS Information Disclosure Vulnerability (CNVD-2019-03471)

Monstra CMS is a lightweight PHP-based content management system CMS developed by Ukrainian software developer Sergey Romanenko. The system is easy to install and use, scalable and so on. An information disclosure vulnerability exists in the...

CVE-2018-16977

Monstra CMS V3.0.4 has an information leakage risk e.g., PATH, DOCUMENTROOT, and SERVERADMIN in libraries/Gelato/ErrorHandler/Resources/Views/Errors/exception.php...

Cross site scripting

In Yii Framework 2.x before 2.0.14, remote attackers could obtain potentially sensitive information from exception messages, or exploit reflected XSS on the error handler page in non-debug mode. Related to base/ErrorHandler.php, log/Dispatcher.php, and views/errorHandler/exception.php...