Stored Cross Site Scripting (XSS) vulnerability in MiniCMS 1.1.1 allows attackers to run arbitrary code via crafted string appended to...
5.4CVSS
6.2AI Score
0.0004EPSS
Cross Site Scripting Vulnerability in MiniCMS v.1.10 allows attacker to execute arbitrary code via a crafted get...
9.6CVSS
8.9AI Score
0.002EPSS
File inclusion vulnerability in Minicms v1.9 allows remote attackers to execute arbitary PHP code via...
9.8CVSS
8.1AI Score
0.004EPSS
A Cross-Site Request Forgery (CSRF) in MiniCMS v1.11 allows attackers to arbitrarily delete local .dat files via clicking on a malicious...
8.1CVSS
7.9AI Score
0.001EPSS
A cross-site scripting (XSS) vulnerability exists in Mini CMS V1.11. The vulnerability exists in the article upload: post-edit.php...
6.1CVSS
5.9AI Score
0.001EPSS
MiniCMS v1.11 was discovered to contain a cross-site scripting (XSS) vulnerability via...
5.4CVSS
5.3AI Score
0.001EPSS
Cross Site Scripting (XSS) in MiniCMS v1.10 allows remote attackers to execute arbitrary code by injecting commands via a crafted HTTP request to the component...
6.1CVSS
7.3AI Score
0.001EPSS
Directory traversal vulnerability in post-edit.php in MiniCMS V1.10 allows remote attackers to include and execute arbitrary files via the state...
9.8CVSS
8.1AI Score
0.013EPSS
Directory traversal vulnerability in page_edit.php in MiniCMS V1.10 allows remote attackers to read arbitrary files via the state...
7.5CVSS
7.5AI Score
0.018EPSS
In MiniCMS V1.10, stored XSS was found in mc-admin/conf.php (comment box), which can be used to get a user's...
4.8CVSS
6.1AI Score
0.001EPSS
In MiniCMS V1.10, stored XSS was found in mc-admin/page-edit.php (content box), which can be used to get a user's...
4.8CVSS
4.7AI Score
0.001EPSS
In MiniCMS V1.10, stored XSS was found in mc-admin/post-edit.php via the content box. An attacker can use it to get a user's cookie. This is different from CVE-2018-10296, CVE-2018-16233, CVE-2018-20520, and...
4.8CVSS
5.8AI Score
0.001EPSS
In MiniCMS V1.10, stored XSS was found in mc-admin/post-edit.php via the tags box. An attacker can use it to get a user's cookie. This is different from CVE-2018-10296, CVE-2018-16233, and...
6.1CVSS
5.3AI Score
0.001EPSS
MiniCMS 1.10 allows mc-admin/post.php?state=publish&delete= CSRF to delete articles, a different vulnerability than...
6.5CVSS
7.5AI Score
0.001EPSS
MiniCMS V1.10 has XSS via the mc-admin/post-edit.php query string, a related issue to CVE-2018-10296 and...
6.1CVSS
5.4AI Score
0.001EPSS
MiniCMS 1.10 allows file deletion via /mc-admin/post.php?state=delete&delete= because the authentication check occurs too...
7.5CVSS
6.6AI Score
0.001EPSS
MiniCMS 1.10 allows execution of arbitrary PHP code via the install.php sitename parameter, which affects the site_name field in...
9.8CVSS
7.8AI Score
0.004EPSS
MiniCMS 1.10 allows full path disclosure via /mc-admin/post.php?state=delete&delete= with an invalid...
5.3CVSS
7.3AI Score
0.001EPSS
MiniCMS 1.10, when Internet Explorer is used, allows XSS via a crafted URI because $_SERVER['REQUEST_URI'] is...
6.1CVSS
6.1AI Score
0.001EPSS
An issue was discovered in MiniCMS 1.10. There is an mc-admin/post.php?tag= XSS vulnerability for a state=delete, state=draft, or state=publish...
6.1CVSS
6.5AI Score
0.001EPSS
6.1CVSS
5.4AI Score
0.001EPSS
6.1CVSS
6.4AI Score
0.001EPSS
MiniCMS version 1.1 contains a Cross Site Scripting (XSS) vulnerability in http://example.org/mc-admin/page.php?date={payload} that can result in code...
6.1CVSS
6.9AI Score
0.001EPSS
mc-admin/post.php in MiniCMS 1.10 allows remote attackers to obtain a directory listing of the top-level directory of the web root via a link that becomes available after posting an...
2.7CVSS
7.4AI Score
0.001EPSS
mc-admin/post-edit.php in MiniCMS 1.10 allows full path disclosure via a modified id...
2.7CVSS
7.2AI Score
0.001EPSS
6.1CVSS
5.4AI Score
0.001EPSS
5.4CVSS
6.2AI Score
0.001EPSS
There is a CSRF vulnerability in mc-admin/conf.php in MiniCMS 1.10 that can change the administrator account...
8.8CVSS
8.6AI Score
0.002EPSS