CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
| 01/11/2018 |
| CVE-2018-18890 | 中危5.3 | MiniCMS 1.10 allows full path disclosure via /mc-admin/post.php?state=delete&delete= with an invalid filename. | 01/11/2018 |
| CVE-2018-17039 | 中危6.1 | MiniCMS 1.10, when Internet Explorer is used, allows XSS via a crafted URI because $_SERVER['REQUEST_URI'] is mishandled. | 14/09/2018 |
| CVE-2018-16298 | 中危6.1 | An issue was discovered in MiniCMS 1.10. There is an mc-admin/post.php?tag= XSS vulnerability for a state=delete, state=draft, or state=publish request. | 31/08/2018 |
| CVE-2018-16233 | 中危6.1 | MiniCMS V1.10 has XSS via the mc-admin/post-edit.php tags parameter. | 30/08/2018 |
| CVE-2018-15899 | 中危6.1 | An issue was discovered in MiniCMS 1.10. There is a post.php?date= XSS vulnerability. | 27/08/2018 |
| CVE-2018-1000638 | 中危6.1 | MiniCMS version 1.1 contains a Cross Site Scripting (XSS) vulnerability in http://example.org/mc-admin/page.php?date={payload} that can result in code injection. | 20/08/2018 |
| CVE-2018-10424 | 低危2.7 | mc-admin/post-edit.php in MiniCMS 1.10 allows full path disclosure via a modified id field. | 26/04/2018 |
| CVE-2018-10423 | 低危2.7 | mc-admin/post.php in MiniCMS 1.10 allows remote attackers to obtain a directory listing of the top-level directory of the web root via a link that becomes available after posting an article. | 26/04/2018 |
| CVE-2018-10296 | 中危6.1 | MiniCMS V1.10 has XSS via the mc-admin/post-edit.php title parameter. | 22/04/2018 |
| CVE-2018-10227 | 中危5.4 | MiniCMS v1.10 has XSS via the mc-admin/conf.php site_link parameter. | 19/04/2018 |
| CVE-2018-9092 | 高危8.8 | There is a CSRF vulnerability in mc-admin/conf.php in MiniCMS 1.10 that can change the administrator account password. | 27/03/2018 |