17 matches found
CVE-2023-46378
Stored Cross Site Scripting XSS vulnerability in MiniCMS 1.1.1 allows attackers to run arbitrary code via crafted string appended to /mc-admin/conf.php...
CVE-2023-46378
Stored Cross Site Scripting XSS vulnerability in MiniCMS 1.1.1 allows attackers to run arbitrary code via crafted string appended to /mc-admin/conf.php...
CVE-2023-46378: Improper Neutralization of Input During Web Page Generation
Stored Cross Site Scripting XSS vulnerability in MiniCMS 1.1.1 allows attackers to run arbitrary code via crafted string appended to /mc-admin/conf.php...
CVE-2019-13341
In MiniCMS V1.10, stored XSS was found in mc-admin/conf.php comment box, which can be used to get a user's cookie...
Cross site scripting
In MiniCMS V1.10, stored XSS was found in mc-admin/conf.php comment box, which can be used to get a user's cookie...
CVE-2019-13341
MiniCMS v1.10 contains a stored XSS in mc-admin/conf.php (comment box). The vulnerability arises from insufficient input validation of client-side data, enabling an attacker to steal a user’s cookie. The affected product is MiniCMS 1.10; no patch/version remediation details are provided in the su...
PT-2019-13277
Name of the Vulnerable Software and Affected Versions MiniCMS version 1.10 Description A stored XSS issue was discovered in the comment box of mc-admin/conf.php, which can be exploited to obtain a user's cookie. Recommendations For MiniCMS version 1.10, consider disabling the comment box...
CVE-2019-13341: Improper Neutralization of Input During Web Page Generation
In MiniCMS V1.10, stored XSS was found in mc-admin/conf.php comment box, which can be used to get a user's cookie...
CVE-2018-10227
MiniCMS v1.10 has XSS via the mc-admin/conf.php sitelink parameter...
CVE-2018-10227: Improper Neutralization of Input During Web Page Generation
MiniCMS v1.10 has XSS via the mc-admin/conf.php sitelink parameter...
PT-2018-9768
Name of the Vulnerable Software and Affected Versions: MiniCMS version 1.10 Description: The issue concerns a security problem where an attacker can execute malicious scripts. This is achieved through the site link parameter in the 'mc-admin/conf.php' endpoint. Recommendations: For MiniCMS versio...
CVE-2018-9092
There is a CSRF vulnerability in mc-admin/conf.php in MiniCMS 1.10 that can change the administrator account password...
Cross site request forgery (csrf)
There is a CSRF vulnerability in mc-admin/conf.php in MiniCMS 1.10 that can change the administrator account password...
CVE-2018-9092
There is a CSRF vulnerability in mc-admin/conf.php in MiniCMS 1.10 that can change the administrator account password...
CVE-2018-9092
There is a CSRF vulnerability in mc-admin/conf.php in MiniCMS 1.10 that can change the administrator account password...
PT-2018-18849
Name of the Vulnerable Software and Affected Versions MiniCMS version 1.10 Description The issue is related to a CSRF vulnerability in the mc-admin/conf.php file. This vulnerability can be exploited to change the administrator account password. Recommendations For MiniCMS version 1.10, update the...