Login Request a demo
12
Vendor
1234n
1 product with CVEs on record
35
CVEs
0
On KEV
0
New 30D
Products
MI
Minicms
1234n
9.8
35 CVEs0 on KEV0 new
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2025-15458
MI
Minicms
1234n
9.8
1%
Jan 5bg5sbk MiniCMS Article post-edit.php improper authentication
CVE-2025-15457
MI
Minicms
1234n
9.8
1%
Jan 5bg5sbk MiniCMS Trash File Restore post.php improper authentication
CVE-2025-15456
MI
Minicms
1234n
7.5
0%
Jan 5bg5sbk MiniCMS Publish page-edit.php improper authentication
CVE-2025-15455
MI
Minicms
1234n
6.5
1%
Jan 5bg5sbk MiniCMS File Recovery Request page.php delete_page improper authentication
CVE-2024-9282
MI
Minicms
1234n
4.3
0%
Sep 27bg5sbk MiniCMS page-edit.php cross-site request forgery
CVE-2024-9281
MI
Minicms
1234n
4.3
0%
Sep 27bg5sbk MiniCMS post-edit.php cross-site request forgery
CVE-2024-31741
MI
Minicms
1234n
6.1
0%
Apr 26Cross Site Scripting vulnerability in MiniCMS v.1.11 allows a remote attacker to run arbitrary code via crafted string in the URL after login
CVE-2023-46378
MI
Minicms
1234n
5.4
0%
Oct 31Stored Cross Site Scripting (XSS) vulnerability in MiniCMS 1.1.1 allows attackers to run arbitrary code via crafted string appended to /mc-admin/conf.php
CVE-2021-33387
MI
Minicms
1234n
9.6
1%
Feb 24Cross Site Scripting Vulnerability in MiniCMS v.1.10 allows attacker to execute arbitrary code via a crafted get request
CVE-2020-19896
MI
Minicms
1234n
9.8
2%
Jun 28File inclusion vulnerability in Minicms v1.9 allows remote attackers to execute arbitary PHP code via post-edit.php
CVE-2022-33121
MI
Minicms
1234n
8.1
0%
Jun 24A Cross-Site Request Forgery (CSRF) in MiniCMS v1.11 allows attackers to arbitrarily delete local .dat files via clicking on a malicious link
CVE-2021-41663
MI
Minicms
1234n
6.1
1%
Jun 13A cross-site scripting (XSS) vulnerability exists in Mini CMS V1.11
CVE-2021-44970
MI
Minicms
1234n
5.4
0%
Feb 10MiniCMS v1.11 was discovered to contain a cross-site scripting (XSS) vulnerability via /mc-admin/page-edit.php
CVE-2020-17999
MI
Minicms
1234n
6.1
2%
Apr 28Cross Site Scripting (XSS) in MiniCMS v1.10 allows remote attackers to execute arbitrary code by injecting commands via a crafted HTTP request to the component…
CVE-2020-36052
MI
Minicms
1234n
9.8
2%
Jan 5Directory traversal vulnerability in post-edit.php in MiniCMS V1.10 allows remote attackers to include and execute arbitrary files via the state parameter
CVE-2020-36051
MI
Minicms
1234n
7.5
2%
Jan 5Directory traversal vulnerability in page_edit.php in MiniCMS V1.10 allows remote attackers to read arbitrary files via the state parameter
CVE-2019-13341
MI
Minicms
1234n
4.8
1%
Jul 5In MiniCMS V1.10, stored XSS was found in mc-admin/conf.php (comment box), which can be used to get a user's cookie
CVE-2019-13340
MI
Minicms
1234n
4.8
1%
Jul 5In MiniCMS V1.10, stored XSS was found in mc-admin/post-edit.php via the content box
CVE-2019-13339
MI
Minicms
1234n
4.8
1%
Jul 5In MiniCMS V1.10, stored XSS was found in mc-admin/page-edit.php (content box), which can be used to get a user's cookie
CVE-2019-13186
MI
Minicms
1234n
6.1
1%
Jul 3In MiniCMS V1.10, stored XSS was found in mc-admin/post-edit.php via the tags box
CVE-2019-9603
MI
Minicms
1234n
6.5
1%
Mar 6MiniCMS 1.10 allows mc-admin/post.php?state=publish&delete= CSRF to delete articles, a different vulnerability than CVE-2018-18891
CVE-2018-20520
MI
Minicms
1234n
6.1
1%
Dec 27MiniCMS V1.10 has XSS via the mc-admin/post-edit.php query string, a related issue to CVE-2018-10296 and CVE-2018-16233
CVE-2018-18892
MI
Minicms
1234n
9.8
3%
Nov 1MiniCMS 1.10 allows execution of arbitrary PHP code via the install.php sitename parameter, which affects the site_name field in mc_conf.php
CVE-2018-18891
MI
Minicms
1234n
7.5
1%
Nov 1MiniCMS 1.10 allows file deletion via /mc-admin/post.php?state=delete&delete= because the authentication check occurs too late
CVE-2018-18890
MI
Minicms
1234n
5.3
1%
Nov 1MiniCMS 1.10 allows full path disclosure via /mc-admin/post.php?state=delete&delete= with an invalid filename
CVE-2018-17039
MI
Minicms
1234n
6.1
1%
Sep 14MiniCMS 1.10, when Internet Explorer is used, allows XSS via a crafted URI because $_SERVER['REQUEST_URI'] is mishandled
CVE-2018-16298
MI
Minicms
1234n
6.1
1%
Aug 31An issue was discovered in MiniCMS 1.10
CVE-2018-16233
MI
Minicms
1234n
6.1
1%
Aug 30MiniCMS V1.10 has XSS via the mc-admin/post-edit.php tags parameter
CVE-2018-15899
MI
Minicms
1234n
6.1
1%
Aug 27An issue was discovered in MiniCMS 1.10
CVE-2018-1000638
MI
Minicms
1234n
6.1
2%
Aug 20MiniCMS version 1.1 contains a Cross Site Scripting (XSS) vulnerability in http://example.org/mc-admin/page.php?date={payload} that can result in code injection
CVE-2018-10424
MI
Minicms
1234n
2.7
1%
Apr 26mc-admin/post-edit.php in MiniCMS 1.10 allows full path disclosure via a modified id field
CVE-2018-10423
MI
Minicms
1234n
2.7
1%
Apr 26mc-admin/post.php in MiniCMS 1.10 allows remote attackers to obtain a directory listing of the top-level directory of the web root via a link that becomes available after posting…
CVE-2018-10296
MI
Minicms
1234n
6.1
1%
Apr 22MiniCMS V1.10 has XSS via the mc-admin/post-edit.php title parameter
CVE-2018-10227
MI
Minicms
1234n
5.4
1%
Apr 19MiniCMS v1.10 has XSS via the mc-admin/conf.php site_link parameter
CVE-2018-9092
MI
Minicms
1234n
8.8
3%
Mar 27There is a CSRF vulnerability in mc-admin/conf.php in MiniCMS 1.10 that can change the administrator account password