55 matches found
MiniCMS Cross-Site Scripting Vulnerability (CNVD-2018-19088)
MiniCMS is a mini content management system CMS designed for personal websites. A cross-site scripting vulnerability exists in the mc-admin/post.php file in MiniCMS versions prior to 1.10, which can be exploited by remote attackers to inject arbitrary Web script or HTML with the help of the 'tag'...
MiniCMS Cross-Site Scripting Vulnerability (CNVD-2018-08588)
MiniCMS is a mini content management system CMS designed for personal websites. A cross-site scripting vulnerability exists in MiniCMS version 1.10. A remote attacker can exploit this vulnerability to obtain a user cookie with the 'title' parameter...
MiniCMS Cross-Site Scripting Vulnerability
MiniCMS is a mini content management system CMS designed for personal websites. A cross-site scripting vulnerability exists in MiniCMS version 1.10. A remote attacker can exploit this vulnerability by sending the 'sitelink' parameter to the mc-admin/conf.php file to execute commands...
MiniCMS Cross-Site Request Forgery Vulnerability
MiniCMS is a mini content management system CMS designed for personal websites. A cross-site request forgery vulnerability exists in the mc-admin/conf.php file in MiniCMS version 1.10. A remote attacker can exploit this vulnerability to change the password of the administrator account...
Mini CMS 1.1 - name Parameter SQL Injection Vulnerability
Exploit for php platform in category web applications Exploit Mini CMS v1.1 - SQL Injection Google Dork: N/A Date: 07.03.2017 Vendor Homepage: http://www.icloudcenter.com/ Software : http://www.icloudcenter.com/minicms.htm Demo: http://www.icloudcenter.net/demos/minicms/ Version: 1.1 Tested on:...
Mini CMS 1.1 SQL Injection
Exploit Mini CMS v1.1 - SQL Injection Google Dork: N/A Date: 07.03.2017 Vendor Homepage: http://www.icloudcenter.com/ Software : http://www.icloudcenter.com/minicms.htm Demo: http://www.icloudcenter.net/demos/minicms/ Version: 1.1 Tested on: Win7 x64, Kali Linux x64 Exploit Author: Ihsan Sencan...
Mini CMS 1.1 - 'name' SQL Injection
Exploit Mini CMS v1.1 - SQL Injection Google Dork: N/A Date: 07.03.2017 Vendor Homepage: http://www.icloudcenter.com/ Software : http://www.icloudcenter.com/minicms.htm Demo: http://www.icloudcenter.net/demos/minicms/ Version: 1.1 Tested on: Win7 x64, Kali Linux x64 Exploit Author: Ihsan Sencan...
Mini CMS 1.1 - name SQL Injection
Mini CMS 1.1 - name SQL Injection Exploit Mini CMS v1.1 - SQL Injection Google Dork: N/A Date: 07.03.2017 Vendor Homepage: http://www.icloudcenter.com/ Software : http://www.icloudcenter.com/minicms.htm Demo: http://www.icloudcenter.net/demos/minicms/ Version: 1.1 Tested on: Win7 x64, Kali Linux...
Mini CMS 1.1 - Authentication Bypass
Mini CMS 1.1 - Authentication Bypass Exploit Title: IC-Mini CMS Script - Authentication Bypass Google Dork: N/A Date: 20.01.2017 Vendor Homepage: http://www.icloudcenter.com/ Software Buy: http://www.icloudcenter.com/minicms.htm Demo: http://www.icloudcenter.net/demos/minicms/ Version: 1.1 Tested...
Mini CMS 1.1 - Authentication Bypass Vulnerability
Exploit for php platform in category web applications Exploit Title: IC-Mini CMS Script - Authentication Bypass Google Dork: N/A Date: 20.01.2017 Vendor Homepage: http://www.icloudcenter.com/ Software Buy: http://www.icloudcenter.com/minicms.htm Demo: http://www.icloudcenter.net/demos/minicms/...
Mini CMS 1.1 - Authentication Bypass
Exploit Title: IC-Mini CMS Script - Authentication Bypass Google Dork: N/A Date: 20.01.2017 Vendor Homepage: http://www.icloudcenter.com/ Software Buy: http://www.icloudcenter.com/minicms.htm Demo: http://www.icloudcenter.net/demos/minicms/ Version: 1.1 Tested on: Win7 x64 Exploit Author: Ihsan...
CVE-2010-1346
SQL injection vulnerability in admin/login.php in Mini CMS RibaFS 1.0, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the login parameter. NOTE: some of these details are obtained from third party information...
Sql injection
SQL injection vulnerability in admin/login.php in Mini CMS RibaFS 1.0, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the login parameter. NOTE: some of these details are obtained from third party information...
CVE-2010-1346
SQL injection vulnerability in admin/login.php in Mini CMS RibaFS 1.0, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the login parameter. NOTE: some of these details are obtained from third party information...
CVE-2010-1346
Affected software: Mini CMS RibaFS 1.0 (admin/login.php).Vulnerability: SQL injection when magic_quotes_gpc is disabled, allowing remote attackers to execute arbitrary SQL via the login parameter.Root cause: Insufficient input sanitization under disabled magic_quotes_gpc as described in multiple ...
Mini CMS RibaFS 1.0 (Auth Bypass) SQL Injection Vulnerability
============================================================= Mini CMS RibaFS 1.0 Auth Bypass SQL Injection Vulnerability ============================================================= + Mini CMS RibaFS 1.0 Auth Bypass SQL Injection Vulnerability...
Mini-CMS RibaFS 1.0 - Authentication Bypass
Mini-CMS RibaFS 1.0 - Authentication Bypass ============================================================= Mini CMS RibaFS 1.0 Auth Bypass SQL Injection Vulnerability ============================================================= + Mini CMS RibaFS 1.0 Auth Bypass SQL Injection Vulnerability...
Mini CMS RibaFS 1.0 SQL Injection
============================================================= Mini CMS RibaFS 1.0 Auth Bypass SQL Injection Vulnerability ============================================================= + Mini CMS RibaFS 1.0 Auth Bypass SQL Injection Vulnerability...