CVE-2020-19896

CVE-2020-19896 affects Minicms v1.9 and is a file inclusion vulnerability that lets remote attackers execute arbitrary PHP code via the file post-edit.php. The NVD metrics indicate a CVSSv3.1 base score of 9.8 (CRITICAL) with network access, low attack complexity, no user interaction, and impacts...

CVE-2020-19896

File inclusion vulnerability in Minicms v1.9 allows remote attackers to execute arbitary PHP code via post-edit.php...

MiniCMS 安全漏洞

MiniCMS is to simple personal website content management system. A security vulnerability exists in MiniCMS v1.9. An attacker exploited the vulnerability to execute arbitrary PHP code via late editing...

MiniCMS Cross-Site Request Forgery Vulnerability (CNVD-2022-62184)

MiniCMS is content management system. A cross-site request forgery vulnerability exists in MiniCMS v1.11. An attacker can exploit this vulnerability to delete any local .dat file by clicking a malicious link...

CVE-2022-33121

A Cross-Site Request Forgery CSRF in MiniCMS v1.11 allows attackers to arbitrarily delete local .dat files via clicking on a malicious link...

CVE-2022-33121

A Cross-Site Request Forgery CSRF in MiniCMS v1.11 allows attackers to arbitrarily delete local .dat files via clicking on a malicious link...

Cross site request forgery (csrf)

A Cross-Site Request Forgery CSRF in MiniCMS v1.11 allows attackers to arbitrarily delete local .dat files via clicking on a malicious link...

CVE-2022-33121

A Cross-Site Request Forgery CSRF in MiniCMS v1.11 allows attackers to arbitrarily delete local .dat files via clicking on a malicious link...

CVE-2022-33121

A CSRF vulnerability in MiniCMS v1.11 allows attackers to delete local .dat files by clicking a malicious link. This has been reported across multiple feeds (including CNVD, Red Hat, NVD/OSV, CVE lists). The root cause is a CSRF in MiniCMS v1.11; there are no public exploit details within the pro...

MiniCMS 跨站请求伪造漏洞

MiniCMS is content management system. A cross-site request forgery vulnerability exists in MiniCMS v1.11. An attacker can exploit this vulnerability to delete any local .dat file by clicking a malicious link...

MiniCMS Cross-Site Scripting Vulnerability (CNVD-2022-58395)

MiniCMS is content management system. A cross-site scripting vulnerability exists in MiniCMS version V1.11, which stems from a lack of checksum filtering of user-supplied and output data on the post-edit.php page. An attacker can exploit this vulnerability to execute JavaScript code on the client...

MiniCMS 跨站脚本漏洞

MiniCMS is content management system. A cross-site scripting vulnerability exists in MiniCMS version V1.11, which stems from a lack of checksum filtering of user-supplied and output data on the post-edit.php page. An attacker can exploit this vulnerability to execute JavaScript code on the client...

MiniCMS Cross-Site Scripting Vulnerability (CNVD-2022-11519)

MiniCMS is a content management system CMS designed for personal websites. miniCMS has a security vulnerability that stems from the lack of proper validation of client-side data in the WEB application, which can be exploited by attackers to execute client-side code...

CVE-2021-44970

MiniCMS v1.11 was discovered to contain a cross-site scripting XSS vulnerability via /mc-admin/page-edit.php...

CVE-2021-44970

MiniCMS v1.11 was discovered to contain a cross-site scripting XSS vulnerability via /mc-admin/page-edit.php...

Cross site scripting

MiniCMS v1.11 was discovered to contain a cross-site scripting XSS vulnerability via /mc-admin/page-edit.php...

CVE-2021-44970

MiniCMS v1.11 contains a cross-site scripting (XSS) vulnerability exploitable via /mc-admin/page-edit.php. Multiple connected sources attribute the issue to insufficient validation of client-side data within the web application. Impact details are not fully specified in the provided documents; CV...

CVE-2021-44970

MiniCMS v1.11 was discovered to contain a cross-site scripting XSS vulnerability via /mc-admin/page-edit.php...

MiniCMS 跨站脚本漏洞

MiniCMS is a content management system CMS designed for personal websites. miniCMS has a security vulnerability that stems from the lack of proper validation of client-side data in the WEB application, which can be exploited by attackers to execute client-side code...

CVE-2020-17999

Cross Site Scripting XSS in MiniCMS v1.10 allows remote attackers to execute arbitrary code by injecting commands via a crafted HTTP request to the component "/mc-admin/post-edit.php"...