Lucene search
1234nMinicms
4 matches found
CVE-2018-10296
MiniCMS V1.10 has XSS via the mc-admin/post-edit.php title parameter.
6.1CVSS5.2AI score0.0024EPSS
CVE-2018-10423
mc-admin/post.php in MiniCMS 1.10 allows remote attackers to obtain a directory listing of the top-level directory of the web root via a link that becomes available after posting an article.
4CVSS4AI score0.0018EPSS
CVE-2018-10227
MiniCMS v1.10 has XSS via the mc-admin/conf.php site_link parameter.
5.4CVSS5.2AI score0.00206EPSS
CVE-2018-10424
mc-admin/post-edit.php in MiniCMS 1.10 allows full path disclosure via a modified id field.
4CVSS3.9AI score0.00228EPSS