Lucene search
+L

320 matches found

CNNVD
CNNVD
•added 2022/06/24 12:00 a.m.•21 views

MiniCMS 跨站请求伪造漏洞

MiniCMS is content management system. A cross-site request forgery vulnerability exists in MiniCMS v1.11. An attacker can exploit this vulnerability to delete any local .dat file by clicking a malicious link...

8.1CVSS5.4AI score0.0041EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/06/24 12:00 a.m.•3 views

CVE-2022-33121: Cross-Site Request Forgery (CSRF)

A Cross-Site Request Forgery CSRF in MiniCMS v1.11 allows attackers to arbitrarily delete local .dat files via clicking on a malicious link...

8.1CVSS7.5AI score0.0041EPSS
SaveExploits1References2
CNVD
CNVD
•added 2022/06/15 12:00 a.m.•93 views

MiniCMS Cross-Site Scripting Vulnerability (CNVD-2022-58395)

MiniCMS is content management system. A cross-site scripting vulnerability exists in MiniCMS version V1.11, which stems from a lack of checksum filtering of user-supplied and output data on the post-edit.php page. An attacker can exploit this vulnerability to execute JavaScript code on the client...

6.1CVSS6AI score0.00773EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2022/06/13 12:00 a.m.•13 views

MiniCMS 跨站脚本漏洞

MiniCMS is content management system. A cross-site scripting vulnerability exists in MiniCMS version V1.11, which stems from a lack of checksum filtering of user-supplied and output data on the post-edit.php page. An attacker can exploit this vulnerability to execute JavaScript code on the client...

6.1CVSS5.6AI score0.00773EPSS
SaveExploits1References3
CNVD
CNVD
•added 2022/02/14 12:00 a.m.•55 views

MiniCMS Cross-Site Scripting Vulnerability (CNVD-2022-11519)

MiniCMS is a content management system CMS designed for personal websites. miniCMS has a security vulnerability that stems from the lack of proper validation of client-side data in the WEB application, which can be exploited by attackers to execute client-side code...

5.4CVSS3.8AI score0.00487EPSS
SaveExploits1References1
NVD
NVD
•added 2022/02/10 11:15 p.m.•35 views

CVE-2021-44970

MiniCMS v1.11 was discovered to contain a cross-site scripting XSS vulnerability via /mc-admin/page-edit.php...

5.4CVSS0.00487EPSS
SaveExploits1References1
attackerkb
attackerkb
•added 2022/02/10 11:15 p.m.•11 views

CVE-2021-44970

MiniCMS v1.11 was discovered to contain a cross-site scripting XSS vulnerability via /mc-admin/page-edit.php...

5.4CVSS5.9AI score0.00487EPSS
SaveExploits1References2
OSV
OSV
•added 2022/02/10 11:15 p.m.•29 views

CVE-2021-44970

MiniCMS v1.11 was discovered to contain a cross-site scripting XSS vulnerability via /mc-admin/page-edit.php...

5.4CVSS6.1AI score
SaveExploits0References1
Prion
Prion
•added 2022/02/10 11:15 p.m.•34 views

Cross site scripting

MiniCMS v1.11 was discovered to contain a cross-site scripting XSS vulnerability via /mc-admin/page-edit.php...

3.5CVSS5.4AI score0.00487EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
•added 2022/02/10 10:39 p.m.•37 views

CVE-2021-44970

MiniCMS v1.11 was discovered to contain a cross-site scripting XSS vulnerability via /mc-admin/page-edit.php...

5.6AI score0.00487EPSS
SaveExploits1References1
CVE
CVE
•added 2022/02/10 10:39 p.m.•135 views

CVE-2021-44970

MiniCMS v1.11 contains a cross-site scripting (XSS) vulnerability exploitable via /mc-admin/page-edit.php. Multiple connected sources attribute the issue to insufficient validation of client-side data within the web application. Impact details are not fully specified in the provided documents; CV...

5.4CVSS5.3AI score0.00487EPSS
SaveExploits1References1Affected Software1
CNNVD
CNNVD
•added 2022/02/10 12:00 a.m.•15 views

MiniCMS 跨站脚本漏洞

MiniCMS is a content management system CMS designed for personal websites. miniCMS has a security vulnerability that stems from the lack of proper validation of client-side data in the WEB application, which can be exploited by attackers to execute client-side code...

5.4CVSS5.7AI score0.00487EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/02/10 12:00 a.m.•7 views

CVE-2021-44970: Improper Neutralization of Input During Web Page Generation

MiniCMS v1.11 was discovered to contain a cross-site scripting XSS vulnerability via /mc-admin/page-edit.php...

5.4CVSS5.8AI score0.00487EPSS
SaveExploits1References2
OSV
OSV
•added 2021/04/28 4:15 p.m.•27 views

CVE-2020-17999

Cross Site Scripting XSS in MiniCMS v1.10 allows remote attackers to execute arbitrary code by injecting commands via a crafted HTTP request to the component "/mc-admin/post-edit.php"...

6.1CVSS6.8AI score
SaveExploits0References1
NVD
NVD
•added 2021/04/28 4:15 p.m.•34 views

CVE-2020-17999

Cross Site Scripting XSS in MiniCMS v1.10 allows remote attackers to execute arbitrary code by injecting commands via a crafted HTTP request to the component "/mc-admin/post-edit.php"...

6.1CVSS0.01605EPSS
SaveExploits1References1
Prion
Prion
•added 2021/04/28 4:15 p.m.•33 views

Cross site scripting

Cross Site Scripting XSS in MiniCMS v1.10 allows remote attackers to execute arbitrary code by injecting commands via a crafted HTTP request to the component "/mc-admin/post-edit.php"...

4.3CVSS6.3AI score0.01605EPSS
SaveExploits1References1Affected Software1
CVE
CVE
•added 2021/04/28 3:23 p.m.•84 views

CVE-2020-17999

CVE-2020-17999 – MiniCMS v1.10 XSS . Description across multiple sources confirms a Cross Site Scripting vulnerability in MiniCMS v1.10, where remote attackers can inject commands via a crafted HTTP request to the component "/mc-admin/post-edit.php" to execute arbitrary code. The affected product...

6.1CVSS6.9AI score0.01605EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
•added 2021/04/28 3:23 p.m.•36 views

CVE-2020-17999

Cross Site Scripting XSS in MiniCMS v1.10 allows remote attackers to execute arbitrary code by injecting commands via a crafted HTTP request to the component "/mc-admin/post-edit.php"...

6.3AI score0.01605EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/04/28 12:00 a.m.•6 views

CVE-2020-17999: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting XSS in MiniCMS v1.10 allows remote attackers to execute arbitrary code by injecting commands via a crafted HTTP request to the component "/mc-admin/post-edit.php"...

6.1CVSS6.4AI score0.01605EPSS
SaveExploits1References2
CNVD
CNVD
•added 2021/04/26 12:00 a.m.•7 views

File Inclusion Vulnerability in MiniCMS Content Management System

MiniCMS content management system is a popular software under Php source channel. A file inclusion vulnerability exists in Minicms, which can be exploited by an attacker to gain control of the server...

7.3AI score
SaveExploits0
Rows per page
Query Builder