siberia-minis.7910.org Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-958444 Security Researcher Th3plumb3r Helped patch 52 vulnerabilities Received 3 Coordinated Disclosure badges , a holder of 3 badges for responsible and coordinated disclosure, found a security vulnerability affecting siberia-minis.7910.org website and its users. Followin...

Text Smileys Minis ™ - Customized SSL, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Text Smileys Minis ™ published at the 'play' market has multiple vulnerabilities...

CVE-2005-0293

Directory traversal vulnerability in minis.php in Minis 0.2.1 allows remote attackers to read arbitrary files via a .. dot dot in the month parameter...

CVE-2005-0294

minis.php in Minis 0.2.1 allows remote attackers to cause a denial of service infinite loop via an HTTP request for a file that the web server does not have permission to read, as demonstrated using the month parameter...

CVE-2005-0293

Directory traversal vulnerability in minis.php in Minis 0.2.1 allows remote attackers to read arbitrary files via a .. dot dot in the month parameter...

CVE-2005-0293

CVE-2005-0293 describes a directory traversal vulnerability in Minis 0.2.1 where the minis.php script’s month parameter is insufficiently sanitized, allowing remote attackers to read arbitrary files via a …/ path. The issue is documented across multiple sources (NVD/NASL references) as a file-rea...

CVE-2005-0294

The CVE-2005-0294 entry concerns Minis 0.2.1, where the file Minis/minis.php contains a vulnerability that can be triggered by a crafted HTTP request for a file the web server cannot read, causing an infinite loop and a denial of service. The issue is described consistently across multiple source...

[Full-Disclosure] Minis directory traversal vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Title: Minis directory traversal vulnerability Vulnerability discovery: Madelman madelman AT iname.com Date: 31/12/2004 Severity: Moderate Summary: - -------- from vendor site: http://minis.sourceforge.net/ Minis is a tiny, PHP-powered, text-file base...

Minis minis.php month Parameter Traversal Arbitrary File Access

The remote host is running Minis, a weblogging system written in PHP. The remote version of this software is vulnerable to a directory traversal attack. Input to the 'month' parameter of the 'minis.php' script is not properly sanitized. A remote attacker could exploit this to read arbitrary files...

CVE-2005-0294

minis.php in Minis 0.2.1 allows remote attackers to cause a denial of service infinite loop via an HTTP request for a file that the web server does not have permission to read, as demonstrated using the month parameter...

MinisTraverse.txt

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Title: Minis directory traversal vulnerability Vulnerability discovery: Madelman Date: 31/12/2004 Severity: Moderate Summary: - -------- from vendor site: http://minis.sourceforge.net/ Minis is a tiny, PHP-powered, text-file based weblogging system. I...