320 matches found
CVE-2018-15899
An issue was discovered in MiniCMS 1.10. There is a post.php?date= XSS vulnerability...
CVE-2018-15899
CVE-2018-15899 concerns a cross-site scripting (XSS) vulnerability in MiniCMS 1.10. The issue is triggered via the date parameter in the post.php file (post.php?date=), allowing remote attackers to inject arbitrary web script or HTML. Public descriptions across multiple sources (NVD, CNVD) confir...
CVE-2018-15899
An issue was discovered in MiniCMS 1.10. There is a post.php?date= XSS vulnerability...
MiniCMS Cross-Site Scripting Vulnerability (CNVD-2018-18140)
MiniCMS is a mini content management system CMS designed for personal websites. A cross-site scripting vulnerability exists in the post.php file in MiniCMS version 1.10. The vulnerability can be exploited by remote attackers to inject arbitrary web script or HTML with the help of the 'date'...
CVE-2018-15899: Improper Neutralization of Input During Web Page Generation
An issue was discovered in MiniCMS 1.10. There is a post.php?date= XSS vulnerability...
PT-2018-13279
Name of the Vulnerable Software and Affected Versions MiniCMS version 1.10 Description An issue was discovered in MiniCMS. There is a post.php?date= XSS vulnerability. Recommendations For MiniCMS version 1.10, update to a version that fixes the XSS vulnerability in the post.php endpoint,...
CVE-2018-1000638
MiniCMS version 1.1 contains a Cross Site Scripting XSS vulnerability in http://example.org/mc-admin/page.php?date=payload that can result in code injection...
CVE-2018-1000638
MiniCMS version 1.1 contains a Cross Site Scripting XSS vulnerability in http://example.org/mc-admin/page.php?date=payload that can result in code injection...
Cross site scripting
MiniCMS version 1.1 contains a Cross Site Scripting XSS vulnerability in http://example.org/mc-admin/page.php?date=payload that can result in code injection...
CVE-2018-1000638
MiniCMS version 1.1 contains a Cross Site Scripting XSS vulnerability in http://example.org/mc-admin/page.php?date=payload that can result in code injection...
CVE-2018-1000638
CVE-2018-1000638 affects MiniCMS 1.1 with a Cross-Site Scripting (XSS) vulnerability in the URL parameter mc-admin/page.php?date={payload}. The vulnerability allows injection when the GET parameter date is echoed without proper encoding, per multiple sources, including exploit references with PoC...
CVE-2018-1000638: Improper Neutralization of Input During Web Page Generation
MiniCMS version 1.1 contains a Cross Site Scripting XSS vulnerability in http://example.org/mc-admin/page.php?date=payload that can result in code injection...
MiniCMS has multiple vulnerabilities
miniCMS a mini content management system designed for personal websites. MiniCMS has multiple vulnerabilities that can be exploited by attackers to obtain sensitive information on a website...
CVE-2018-10424
mc-admin/post-edit.php in MiniCMS 1.10 allows full path disclosure via a modified id field...
CVE-2018-10423
mc-admin/post.php in MiniCMS 1.10 allows remote attackers to obtain a directory listing of the top-level directory of the web root via a link that becomes available after posting an article...
CVE-2018-10424
mc-admin/post-edit.php in MiniCMS 1.10 allows full path disclosure via a modified id field...
CVE-2018-10423
mc-admin/post.php in MiniCMS 1.10 allows remote attackers to obtain a directory listing of the top-level directory of the web root via a link that becomes available after posting an article...
Path traversal
mc-admin/post-edit.php in MiniCMS 1.10 allows full path disclosure via a modified id field...
CVE-2018-10424
MiniCMS 1.10 is affected. The vulnerability is in mc-admin/post-edit.php where a modified id field allows full path disclosure. The root cause is a path disclosure issue that leads to information exposure. Exploitation details and mitigations are not provided in the supplied documents.