320 matches found
CVE-2018-17039
MiniCMS 1.10, when Internet Explorer is used, allows XSS via a crafted URI because $SERVER'REQUESTURI' is mishandled...
CVE-2018-17039
MiniCMS 1.10, when Internet Explorer is used, allows XSS via a crafted URI because $SERVER'REQUESTURI' is mishandled...
CVE-2018-17039
CVE-2018-17039 affects MiniCMS 1.10. The issue is a cross-site scripting (XSS) vulnerability when Internet Explorer is used, caused by mishandling of $_SERVER['REQUEST_URI'] when processing a crafted URI. The connected documents confirm the vulnerability details and affected component, but do not...
CVE-2018-17039
MiniCMS 1.10, when Internet Explorer is used, allows XSS via a crafted URI because $SERVER'REQUESTURI' is mishandled...
CVE-2018-17039: Improper Neutralization of Input During Web Page Generation
MiniCMS 1.10, when Internet Explorer is used, allows XSS via a crafted URI because $SERVER'REQUESTURI' is mishandled...
Design/Logic Flaw
An issue was discovered in MiniCMS 1.10. There is an mc-admin/post.php?tag= XSS vulnerability for a state=delete, state=draft, or state=publish request...
CVE-2018-16298
An issue was discovered in MiniCMS 1.10. There is an mc-admin/post.php?tag= XSS vulnerability for a state=delete, state=draft, or state=publish request...
CVE-2018-16298
An issue was discovered in MiniCMS 1.10. There is an mc-admin/post.php?tag= XSS vulnerability for a state=delete, state=draft, or state=publish request...
CVE-2018-16298
MiniCMS 1.10 is affected by a cross-site scripting (XSS) vulnerability in the admin endpoint mc-admin/post.php?tag= where requests with state=delete, state=draft, or state=publish can inject script or HTML. The flaw is triggered via the tag parameter and is present in the public CVE entries acros...
CVE-2018-16298
An issue was discovered in MiniCMS 1.10. There is an mc-admin/post.php?tag= XSS vulnerability for a state=delete, state=draft, or state=publish request...
MiniCMS Cross-Site Scripting Vulnerability (CNVD-2018-17188)
MiniCMS is a micro content management system designed for personal websites. A cross-site scripting vulnerability exists in MiniCMS 1.10. An attacker can exploit this vulnerability by using the mc-admin/post-edit.php tags parameter to conduct cross-site scripting attacks...
CVE-2018-16298: Improper Neutralization of Input During Web Page Generation
An issue was discovered in MiniCMS 1.10. There is an mc-admin/post.php?tag= XSS vulnerability for a state=delete, state=draft, or state=publish request...
Design/Logic Flaw
MiniCMS V1.10 has XSS via the mc-admin/post-edit.php tags parameter...
CVE-2018-16233
MiniCMS V1.10 has XSS via the mc-admin/post-edit.php tags parameter...
CVE-2018-16233
MiniCMS V1.10 has XSS via the mc-admin/post-edit.php tags parameter...
CVE-2018-16233
MiniCMS V1.10 has XSS via the mc-admin/post-edit.php tags parameter...
CVE-2018-16233
Technical details for CVE-2018-16233 are not publicly available in the provided documents. Monitor for updates from vendors and security advisories.
CVE-2018-16233: Improper Neutralization of Input During Web Page Generation
MiniCMS V1.10 has XSS via the mc-admin/post-edit.php tags parameter...