320 matches found
MiniCMS 跨站请求伪造漏洞
MiniCMS is content management system. A cross-site request forgery vulnerability exists in MiniCMS v1.11. An attacker can exploit this vulnerability to delete any local .dat file by clicking a malicious link...
CVE-2022-33121: Cross-Site Request Forgery (CSRF)
A Cross-Site Request Forgery CSRF in MiniCMS v1.11 allows attackers to arbitrarily delete local .dat files via clicking on a malicious link...
MiniCMS Cross-Site Scripting Vulnerability (CNVD-2022-58395)
MiniCMS is content management system. A cross-site scripting vulnerability exists in MiniCMS version V1.11, which stems from a lack of checksum filtering of user-supplied and output data on the post-edit.php page. An attacker can exploit this vulnerability to execute JavaScript code on the client...
MiniCMS 跨站脚本漏洞
MiniCMS is content management system. A cross-site scripting vulnerability exists in MiniCMS version V1.11, which stems from a lack of checksum filtering of user-supplied and output data on the post-edit.php page. An attacker can exploit this vulnerability to execute JavaScript code on the client...
MiniCMS Cross-Site Scripting Vulnerability (CNVD-2022-11519)
MiniCMS is a content management system CMS designed for personal websites. miniCMS has a security vulnerability that stems from the lack of proper validation of client-side data in the WEB application, which can be exploited by attackers to execute client-side code...
CVE-2021-44970
MiniCMS v1.11 was discovered to contain a cross-site scripting XSS vulnerability via /mc-admin/page-edit.php...
CVE-2021-44970
MiniCMS v1.11 was discovered to contain a cross-site scripting XSS vulnerability via /mc-admin/page-edit.php...
CVE-2021-44970
MiniCMS v1.11 was discovered to contain a cross-site scripting XSS vulnerability via /mc-admin/page-edit.php...
Cross site scripting
MiniCMS v1.11 was discovered to contain a cross-site scripting XSS vulnerability via /mc-admin/page-edit.php...
CVE-2021-44970
MiniCMS v1.11 was discovered to contain a cross-site scripting XSS vulnerability via /mc-admin/page-edit.php...
CVE-2021-44970
MiniCMS v1.11 contains a cross-site scripting (XSS) vulnerability exploitable via /mc-admin/page-edit.php. Multiple connected sources attribute the issue to insufficient validation of client-side data within the web application. Impact details are not fully specified in the provided documents; CV...
MiniCMS 跨站脚本漏洞
MiniCMS is a content management system CMS designed for personal websites. miniCMS has a security vulnerability that stems from the lack of proper validation of client-side data in the WEB application, which can be exploited by attackers to execute client-side code...
CVE-2021-44970: Improper Neutralization of Input During Web Page Generation
MiniCMS v1.11 was discovered to contain a cross-site scripting XSS vulnerability via /mc-admin/page-edit.php...
CVE-2020-17999
Cross Site Scripting XSS in MiniCMS v1.10 allows remote attackers to execute arbitrary code by injecting commands via a crafted HTTP request to the component "/mc-admin/post-edit.php"...
CVE-2020-17999
Cross Site Scripting XSS in MiniCMS v1.10 allows remote attackers to execute arbitrary code by injecting commands via a crafted HTTP request to the component "/mc-admin/post-edit.php"...
Cross site scripting
Cross Site Scripting XSS in MiniCMS v1.10 allows remote attackers to execute arbitrary code by injecting commands via a crafted HTTP request to the component "/mc-admin/post-edit.php"...
CVE-2020-17999
CVE-2020-17999 – MiniCMS v1.10 XSS . Description across multiple sources confirms a Cross Site Scripting vulnerability in MiniCMS v1.10, where remote attackers can inject commands via a crafted HTTP request to the component "/mc-admin/post-edit.php" to execute arbitrary code. The affected product...
CVE-2020-17999
Cross Site Scripting XSS in MiniCMS v1.10 allows remote attackers to execute arbitrary code by injecting commands via a crafted HTTP request to the component "/mc-admin/post-edit.php"...
CVE-2020-17999: Improper Neutralization of Input During Web Page Generation
Cross Site Scripting XSS in MiniCMS v1.10 allows remote attackers to execute arbitrary code by injecting commands via a crafted HTTP request to the component "/mc-admin/post-edit.php"...
File Inclusion Vulnerability in MiniCMS Content Management System
MiniCMS content management system is a popular software under Php source channel. A file inclusion vulnerability exists in Minicms, which can be exploited by an attacker to gain control of the server...