Stored Cross Site Scripting (XSS) vulnerability in MiniCMS 1.1.1 allows attackers to run arbitrary code via crafted string appended to...
5.4CVSS
5.3AI Score
0.0004EPSS
Cross Site Scripting Vulnerability in MiniCMS v.1.10 allows attacker to execute arbitrary code via a crafted get...
9.6CVSS
9AI Score
0.002EPSS
5.4CVSS
5.2AI Score
0.001EPSS
mc-admin/post.php in MiniCMS 1.10 allows remote attackers to obtain a directory listing of the top-level directory of the web root via a link that becomes available after posting an...
2.7CVSS
4AI Score
0.001EPSS
mc-admin/post-edit.php in MiniCMS 1.10 allows full path disclosure via a modified id...
2.7CVSS
3.9AI Score
0.001EPSS
An issue was discovered in MiniCMS 1.10. There is an mc-admin/post.php?tag= XSS vulnerability for a state=delete, state=draft, or state=publish...
6.1CVSS
5.9AI Score
0.001EPSS
MiniCMS 1.10 allows full path disclosure via /mc-admin/post.php?state=delete&delete= with an invalid...
5.3CVSS
5.2AI Score
0.001EPSS
MiniCMS 1.10 allows file deletion via /mc-admin/post.php?state=delete&delete= because the authentication check occurs too...
7.5CVSS
6.9AI Score
0.001EPSS
MiniCMS 1.10 allows execution of arbitrary PHP code via the install.php sitename parameter, which affects the site_name field in...
9.8CVSS
9.6AI Score
0.004EPSS
MiniCMS version 1.1 contains a Cross Site Scripting (XSS) vulnerability in http://example.org/mc-admin/page.php?date={payload} that can result in code...
6.1CVSS
6.2AI Score
0.001EPSS
MiniCMS 1.10 allows mc-admin/post.php?state=publish&delete= CSRF to delete articles, a different vulnerability than...
6.5CVSS
6.8AI Score
0.001EPSS
File inclusion vulnerability in Minicms v1.9 allows remote attackers to execute arbitary PHP code via...
9.8CVSS
9.6AI Score
0.004EPSS
A Cross-Site Request Forgery (CSRF) in MiniCMS v1.11 allows attackers to arbitrarily delete local .dat files via clicking on a malicious...
8.1CVSS
7.9AI Score
0.001EPSS
A cross-site scripting (XSS) vulnerability exists in Mini CMS V1.11. The vulnerability exists in the article upload: post-edit.php...
6.1CVSS
5.9AI Score
0.001EPSS
MiniCMS v1.11 was discovered to contain a cross-site scripting (XSS) vulnerability via...
5.4CVSS
5.3AI Score
0.001EPSS
Cross Site Scripting (XSS) in MiniCMS v1.10 allows remote attackers to execute arbitrary code by injecting commands via a crafted HTTP request to the component...
6.1CVSS
6.3AI Score
0.001EPSS
Directory traversal vulnerability in post-edit.php in MiniCMS V1.10 allows remote attackers to include and execute arbitrary files via the state...
9.8CVSS
9.6AI Score
0.013EPSS
Directory traversal vulnerability in page_edit.php in MiniCMS V1.10 allows remote attackers to read arbitrary files via the state...
7.5CVSS
7.4AI Score
0.018EPSS
In MiniCMS V1.10, stored XSS was found in mc-admin/conf.php (comment box), which can be used to get a user's...
4.8CVSS
4.7AI Score
0.001EPSS
In MiniCMS V1.10, stored XSS was found in mc-admin/post-edit.php via the content box. An attacker can use it to get a user's cookie. This is different from CVE-2018-10296, CVE-2018-16233, CVE-2018-20520, and...
4.8CVSS
5.1AI Score
0.001EPSS
In MiniCMS V1.10, stored XSS was found in mc-admin/page-edit.php (content box), which can be used to get a user's...
4.8CVSS
4.7AI Score
0.001EPSS
In MiniCMS V1.10, stored XSS was found in mc-admin/post-edit.php via the tags box. An attacker can use it to get a user's cookie. This is different from CVE-2018-10296, CVE-2018-16233, and...
6.1CVSS
5.1AI Score
0.001EPSS
MiniCMS V1.10 has XSS via the mc-admin/post-edit.php query string, a related issue to CVE-2018-10296 and...
6.1CVSS
5.2AI Score
0.001EPSS
MiniCMS 1.10, when Internet Explorer is used, allows XSS via a crafted URI because $_SERVER['REQUEST_URI'] is...
6.1CVSS
5.8AI Score
0.001EPSS
6.1CVSS
5.2AI Score
0.001EPSS
6.1CVSS
5.9AI Score
0.001EPSS
6.1CVSS
5.2AI Score
0.001EPSS
There is a CSRF vulnerability in mc-admin/conf.php in MiniCMS 1.10 that can change the administrator account...
8.8CVSS
8.5AI Score
0.002EPSS