320 matches found
CVE-2021-33387
Cross Site Scripting Vulnerability in MiniCMS v.1.10 allows attacker to execute arbitrary code via a crafted get request...
Cross site scripting
Cross Site Scripting Vulnerability in MiniCMS v.1.10 allows attacker to execute arbitrary code via a crafted get request...
CVE-2021-33387: Improper Neutralization of Input During Web Page Generation
Cross Site Scripting Vulnerability in MiniCMS v.1.10 allows attacker to execute arbitrary code via a crafted get request...
MiniCMS 跨站脚本漏洞
MiniCMS is the minimalist content management system for personal websites. A security vulnerability exists in MiniCMS version v.1.10 that originates from allowing an unauthenticated attacker to execute arbitrary code via a crafted get request...
CVE-2021-33387
Cross Site Scripting Vulnerability in MiniCMS v.1.10 allows attacker to execute arbitrary code via a crafted get request...
PT-2023-12209
Name of the Vulnerable Software and Affected Versions MiniCMS version 1.10 Description The issue allows an attacker to execute arbitrary code via a crafted get request, specifically through a Cross Site Scripting vulnerability. Recommendations For MiniCMS version 1.10, update to a version that...
CVE-2021-33387
Cross Site Scripting Vulnerability in MiniCMS v.1.10 allows attacker to execute arbitrary code via a crafted get request...
CVE-2021-33387
CVE-2021-33387 is a Cross Site Scripting vulnerability in MiniCMS v1.10 that allows an attacker to execute arbitrary code through a crafted GET request. Related sources (NVD/NIST, Red Hat, OSV, CVE listings) consistently describe MiniCMS-1.10 as vulnerable to XSS with high impact (confidentiality...
CVE-2020-19896
File inclusion vulnerability in Minicms v1.9 allows remote attackers to execute arbitary PHP code via post-edit.php...
CVE-2020-19896
File inclusion vulnerability in Minicms v1.9 allows remote attackers to execute arbitary PHP code via post-edit.php...
CVE-2020-19896
File inclusion vulnerability in Minicms v1.9 allows remote attackers to execute arbitary PHP code via post-edit.php...
CVE-2020-19896
CVE-2020-19896 affects Minicms v1.9 and is a file inclusion vulnerability that lets remote attackers execute arbitrary PHP code via the file post-edit.php. The NVD metrics indicate a CVSSv3.1 base score of 9.8 (CRITICAL) with network access, low attack complexity, no user interaction, and impacts...
MiniCMS Cross-Site Request Forgery Vulnerability (CNVD-2022-62184)
MiniCMS is content management system. A cross-site request forgery vulnerability exists in MiniCMS v1.11. An attacker can exploit this vulnerability to delete any local .dat file by clicking a malicious link...
CVE-2020-19896: Undefined Security Weakness
File inclusion vulnerability in Minicms v1.9 allows remote attackers to execute arbitary PHP code via post-edit.php...
MiniCMS 安全漏洞
MiniCMS is to simple personal website content management system. A security vulnerability exists in MiniCMS v1.9. An attacker exploited the vulnerability to execute arbitrary PHP code via late editing...
CVE-2022-33121
A Cross-Site Request Forgery CSRF in MiniCMS v1.11 allows attackers to arbitrarily delete local .dat files via clicking on a malicious link...
Cross site request forgery (csrf)
A Cross-Site Request Forgery CSRF in MiniCMS v1.11 allows attackers to arbitrarily delete local .dat files via clicking on a malicious link...
CVE-2022-33121
A CSRF vulnerability in MiniCMS v1.11 allows attackers to delete local .dat files by clicking a malicious link. This has been reported across multiple feeds (including CNVD, Red Hat, NVD/OSV, CVE lists). The root cause is a CSRF in MiniCMS v1.11; there are no public exploit details within the pro...