CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
| 01/11/2018 |
| CVE-2018-18890 | 보통5.3 | MiniCMS 1.10 allows full path disclosure via /mc-admin/post.php?state=delete&delete= with an invalid filename. | 01/11/2018 |
| CVE-2018-17039 | 보통6.1 | MiniCMS 1.10, when Internet Explorer is used, allows XSS via a crafted URI because $_SERVER['REQUEST_URI'] is mishandled. | 14/09/2018 |
| CVE-2018-16298 | 보통6.1 | An issue was discovered in MiniCMS 1.10. There is an mc-admin/post.php?tag= XSS vulnerability for a state=delete, state=draft, or state=publish request. | 31/08/2018 |
| CVE-2018-16233 | 보통6.1 | MiniCMS V1.10 has XSS via the mc-admin/post-edit.php tags parameter. | 30/08/2018 |
| CVE-2018-15899 | 보통6.1 | An issue was discovered in MiniCMS 1.10. There is a post.php?date= XSS vulnerability. | 27/08/2018 |
| CVE-2018-1000638 | 보통6.1 | MiniCMS version 1.1 contains a Cross Site Scripting (XSS) vulnerability in http://example.org/mc-admin/page.php?date={payload} that can result in code injection. | 20/08/2018 |
| CVE-2018-10424 | 낮음2.7 | mc-admin/post-edit.php in MiniCMS 1.10 allows full path disclosure via a modified id field. | 26/04/2018 |
| CVE-2018-10423 | 낮음2.7 | mc-admin/post.php in MiniCMS 1.10 allows remote attackers to obtain a directory listing of the top-level directory of the web root via a link that becomes available after posting an article. | 26/04/2018 |
| CVE-2018-10296 | 보통6.1 | MiniCMS V1.10 has XSS via the mc-admin/post-edit.php title parameter. | 22/04/2018 |
| CVE-2018-10227 | 보통5.4 | MiniCMS v1.10 has XSS via the mc-admin/conf.php site_link parameter. | 19/04/2018 |
| CVE-2018-9092 | 높음8.8 | There is a CSRF vulnerability in mc-admin/conf.php in MiniCMS 1.10 that can change the administrator account password. | 27/03/2018 |