CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
| 01/11/2018 |
| CVE-2018-18890 | MÉDIO5.3 | MiniCMS 1.10 allows full path disclosure via /mc-admin/post.php?state=delete&delete= with an invalid filename. | 01/11/2018 |
| CVE-2018-17039 | MÉDIO6.1 | MiniCMS 1.10, when Internet Explorer is used, allows XSS via a crafted URI because $_SERVER['REQUEST_URI'] is mishandled. | 14/09/2018 |
| CVE-2018-16298 | MÉDIO6.1 | An issue was discovered in MiniCMS 1.10. There is an mc-admin/post.php?tag= XSS vulnerability for a state=delete, state=draft, or state=publish request. | 31/08/2018 |
| CVE-2018-16233 | MÉDIO6.1 | MiniCMS V1.10 has XSS via the mc-admin/post-edit.php tags parameter. | 30/08/2018 |
| CVE-2018-15899 | MÉDIO6.1 | An issue was discovered in MiniCMS 1.10. There is a post.php?date= XSS vulnerability. | 27/08/2018 |
| CVE-2018-1000638 | MÉDIO6.1 | MiniCMS version 1.1 contains a Cross Site Scripting (XSS) vulnerability in http://example.org/mc-admin/page.php?date={payload} that can result in code injection. | 20/08/2018 |
| CVE-2018-10424 | BAIXO2.7 | mc-admin/post-edit.php in MiniCMS 1.10 allows full path disclosure via a modified id field. | 26/04/2018 |
| CVE-2018-10423 | BAIXO2.7 | mc-admin/post.php in MiniCMS 1.10 allows remote attackers to obtain a directory listing of the top-level directory of the web root via a link that becomes available after posting an article. | 26/04/2018 |
| CVE-2018-10296 | MÉDIO6.1 | MiniCMS V1.10 has XSS via the mc-admin/post-edit.php title parameter. | 22/04/2018 |
| CVE-2018-10227 | MÉDIO5.4 | MiniCMS v1.10 has XSS via the mc-admin/conf.php site_link parameter. | 19/04/2018 |
| CVE-2018-9092 | ALTO8.8 | There is a CSRF vulnerability in mc-admin/conf.php in MiniCMS 1.10 that can change the administrator account password. | 27/03/2018 |