MiniCMS Cross-Site Scripting Vulnerability (CNVD-2019-23979)

MiniCMS is a content management system CMS designed for personal websites. A cross-site scripting vulnerability exists in the mc-admin/post-edit.php file in MiniCMS version 1.10. The vulnerability stems from the lack of proper validation of client-side data by the WEB application. An attacker can...

CVE-2019-13186

In MiniCMS V1.10, stored XSS was found in mc-admin/post-edit.php via the tags box. An attacker can use it to get a user's cookie. This is different from CVE-2018-10296, CVE-2018-16233, and CVE-2018-20520...

MiniCMS Cross-Site Scripting Vulnerability (CNVD-2018-19748)

MiniCMS is a mini content management system CMS designed for personal websites. A cross-site scripting vulnerability exists in MiniCMS version 1.10, which stems from the program's failure to properly handle $SERVER'REQUESTURI'. A remote attacker can inject arbitrary web script or HTML with the he...

MiniCMS Cross-Site Scripting Vulnerability (CNVD-2018-19088)

MiniCMS is a mini content management system CMS designed for personal websites. A cross-site scripting vulnerability exists in the mc-admin/post.php file in MiniCMS versions prior to 1.10, which can be exploited by remote attackers to inject arbitrary Web script or HTML with the help of the 'tag'...

MiniCMS Cross-Site Scripting Vulnerability (CNVD-2018-08588)

MiniCMS is a mini content management system CMS designed for personal websites. A cross-site scripting vulnerability exists in MiniCMS version 1.10. A remote attacker can exploit this vulnerability to obtain a user cookie with the 'title' parameter...

MiniCMS Cross-Site Scripting Vulnerability

MiniCMS is a mini content management system CMS designed for personal websites. A cross-site scripting vulnerability exists in MiniCMS version 1.10. A remote attacker can exploit this vulnerability by sending the 'sitelink' parameter to the mc-admin/conf.php file to execute commands...

MiniCMS Cross-Site Request Forgery Vulnerability

MiniCMS is a mini content management system CMS designed for personal websites. A cross-site request forgery vulnerability exists in the mc-admin/conf.php file in MiniCMS version 1.10. A remote attacker can exploit this vulnerability to change the password of the administrator account...

Mini CMS 1.1 - name Parameter SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Mini CMS v1.1 - SQL Injection Google Dork: N/A Date: 07.03.2017 Vendor Homepage: http://www.icloudcenter.com/ Software : http://www.icloudcenter.com/minicms.htm Demo: http://www.icloudcenter.net/demos/minicms/ Version: 1.1 Tested on:...

Mini CMS 1.1 SQL Injection

Exploit Mini CMS v1.1 - SQL Injection Google Dork: N/A Date: 07.03.2017 Vendor Homepage: http://www.icloudcenter.com/ Software : http://www.icloudcenter.com/minicms.htm Demo: http://www.icloudcenter.net/demos/minicms/ Version: 1.1 Tested on: Win7 x64, Kali Linux x64 Exploit Author: Ihsan Sencan...

Mini CMS 1.1 - name SQL Injection

Mini CMS 1.1 - name SQL Injection Exploit Mini CMS v1.1 - SQL Injection Google Dork: N/A Date: 07.03.2017 Vendor Homepage: http://www.icloudcenter.com/ Software : http://www.icloudcenter.com/minicms.htm Demo: http://www.icloudcenter.net/demos/minicms/ Version: 1.1 Tested on: Win7 x64, Kali Linux...

Mini CMS 1.1 - 'name' SQL Injection

Exploit Mini CMS v1.1 - SQL Injection Google Dork: N/A Date: 07.03.2017 Vendor Homepage: http://www.icloudcenter.com/ Software : http://www.icloudcenter.com/minicms.htm Demo: http://www.icloudcenter.net/demos/minicms/ Version: 1.1 Tested on: Win7 x64, Kali Linux x64 Exploit Author: Ihsan Sencan...

Mini CMS 1.1 - Authentication Bypass

Exploit Title: IC-Mini CMS Script - Authentication Bypass Google Dork: N/A Date: 20.01.2017 Vendor Homepage: http://www.icloudcenter.com/ Software Buy: http://www.icloudcenter.com/minicms.htm Demo: http://www.icloudcenter.net/demos/minicms/ Version: 1.1 Tested on: Win7 x64 Exploit Author: Ihsan...

Mini CMS 1.1 - Authentication Bypass Vulnerability

Exploit for php platform in category web applications Exploit Title: IC-Mini CMS Script - Authentication Bypass Google Dork: N/A Date: 20.01.2017 Vendor Homepage: http://www.icloudcenter.com/ Software Buy: http://www.icloudcenter.com/minicms.htm Demo: http://www.icloudcenter.net/demos/minicms/...

Mini CMS 1.1 - Authentication Bypass

Mini CMS 1.1 - Authentication Bypass Exploit Title: IC-Mini CMS Script - Authentication Bypass Google Dork: N/A Date: 20.01.2017 Vendor Homepage: http://www.icloudcenter.com/ Software Buy: http://www.icloudcenter.com/minicms.htm Demo: http://www.icloudcenter.net/demos/minicms/ Version: 1.1 Tested...

Sql injection

SQL injection vulnerability in admin/login.php in Mini CMS RibaFS 1.0, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the login parameter. NOTE: some of these details are obtained from third party information...

CVE-2010-1346

SQL injection vulnerability in admin/login.php in Mini CMS RibaFS 1.0, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the login parameter. NOTE: some of these details are obtained from third party information...

CVE-2010-1346

Affected software: Mini CMS RibaFS 1.0 (admin/login.php).Vulnerability: SQL injection when magic_quotes_gpc is disabled, allowing remote attackers to execute arbitrary SQL via the login parameter.Root cause: Insufficient input sanitization under disabled magic_quotes_gpc as described in multiple ...

CVE-2010-1346

SQL injection vulnerability in admin/login.php in Mini CMS RibaFS 1.0, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the login parameter. NOTE: some of these details are obtained from third party information...

CVE-2010-1346: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in admin/login.php in Mini CMS RibaFS 1.0, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the login parameter. NOTE: some of these details are obtained from third party information...

Mini CMS RibaFS 1.0 (Auth Bypass) SQL Injection Vulnerability

============================================================= Mini CMS RibaFS 1.0 Auth Bypass SQL Injection Vulnerability ============================================================= + Mini CMS RibaFS 1.0 Auth Bypass SQL Injection Vulnerability...