21 matches found
EUVD-2018-8085
Malware in sbrugna...
CVE-2020-17999: Improper Neutralization of Input During Web Page Generation
Cross Site Scripting XSS in MiniCMS v1.10 allows remote attackers to execute arbitrary code by injecting commands via a crafted HTTP request to the component "/mc-admin/post-edit.php"...
PT-2021-10115
Name of the Vulnerable Software and Affected Versions: MiniCMS version 1.10 Description: The issue allows remote attackers to execute arbitrary code by injecting commands via a crafted HTTP request to the "/mc-admin/post-edit.php" API endpoint. This is a result of a Cross Site Scripting XSS flaw...
MiniCMS 跨站脚本漏洞
MiniCMS is a content management system CMS designed for personal websites. A security vulnerability exists in MiniCMS v1.10 that allows remote attackers to execute arbitrary code by sending a crafted HTTP request injection command to the component "mc-admin post-edit.php"...
Cross site scripting
In MiniCMS V1.10, stored XSS was found in mc-admin/post-edit.php via the content box. An attacker can use it to get a user's cookie. This is different from CVE-2018-10296, CVE-2018-16233, CVE-2018-20520, and CVE-2019-13186...
PT-2019-13276
In MiniCMS V1.10, stored XSS was found in mc-admin/post-edit.php via the content box. An attacker can use it to get a user's cookie. This is different from CVE-2018-10296, CVE-2018-16233, CVE-2018-20520, and CVE-2019-13186...
CVE-2019-13340: Improper Neutralization of Input During Web Page Generation
In MiniCMS V1.10, stored XSS was found in mc-admin/post-edit.php via the content box. An attacker can use it to get a user's cookie. This is different from CVE-2018-10296, CVE-2018-16233, CVE-2018-20520, and CVE-2019-13186...
PT-2019-13175
In MiniCMS V1.10, stored XSS was found in mc-admin/post-edit.php via the tags box. An attacker can use it to get a user's cookie. This is different from CVE-2018-10296, CVE-2018-16233, and CVE-2018-20520...
CVE-2019-13186: Improper Neutralization of Input During Web Page Generation
In MiniCMS V1.10, stored XSS was found in mc-admin/post-edit.php via the tags box. An attacker can use it to get a user's cookie. This is different from CVE-2018-10296, CVE-2018-16233, and CVE-2018-20520...
Sql injection
MiniCMS V1.10 has XSS via the mc-admin/post-edit.php query string, a related issue to CVE-2018-10296 and CVE-2018-16233...
CVE-2018-20520
MiniCMS V1.10 has XSS via the mc-admin/post-edit.php query string, a related issue to CVE-2018-10296 and CVE-2018-16233...
CVE-2018-20520: Improper Neutralization of Input During Web Page Generation
MiniCMS V1.10 has XSS via the mc-admin/post-edit.php query string, a related issue to CVE-2018-10296 and CVE-2018-16233...
PT-2018-15412
MiniCMS V1.10 has XSS via the mc-admin/post-edit.php query string, a related issue to CVE-2018-10296 and CVE-2018-16233...
CVE-2018-16233
MiniCMS V1.10 has XSS via the mc-admin/post-edit.php tags parameter...
PT-2018-13446
Name of the Vulnerable Software and Affected Versions MiniCMS version 1.10 Description The issue allows for XSS via the tags parameter in the "mc-admin/post-edit.php" endpoint. Recommendations For MiniCMS version 1.10, avoid using the tags parameter in the "mc-admin/post-edit.php" endpoint until...
CVE-2018-10424
mc-admin/post-edit.php in MiniCMS 1.10 allows full path disclosure via a modified id field...
CVE-2018-10424: Exposure of Sensitive Information to an Unauthorized Actor
mc-admin/post-edit.php in MiniCMS 1.10 allows full path disclosure via a modified id field...
PT-2018-9877
Name of the Vulnerable Software and Affected Versions: MiniCMS version 1.10 Description: The issue in MiniCMS allows for full path disclosure through a modified id field in the mc-admin/post-edit.php file. Recommendations: For MiniCMS version 1.10, update the mc-admin/post-edit.php file to proper...