İçeriğe atla
Noroxi

1234n kayıtları

1234n üreticisine ait 35 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
0 · %0
Pre-auth RCE
6
Düzeltme kaydı olan
%0
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Yıllara göre kayıt

  1. 18
  2. 19
  3. 21
  4. 22
  5. 23
  6. 24
  7. 26

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

35 kayıt
  • CVE-2018-18892
    40Planlayın

    MiniCMS 1.10 allows execution of arbitrary PHP code via the install.php sitename parameter, which affects the site_name field in mc_conf.php

    KritikCVSS 9,8İstismar yokEPSS %2

    1234n · minicms31 Eki 2018

  • CVE-2020-36052
    40Planlayın

    Directory traversal vulnerability in post-edit.php in MiniCMS V1.10 allows remote attackers to include and execute arbitrary files via the s

    KritikCVSS 9,8İstismar yokEPSS %1

    1234n · minicms5 Oca 2021

  • CVE-2020-19896
    39İzleyin

    File inclusion vulnerability in Minicms v1.9 allows remote attackers to execute arbitary PHP code via post-edit.php.

    KritikCVSS 9,8İstismar yokEPSS %1

    1234n · minicms28 Haz 2022

  • CVE-2021-33387
    38İzleyin

    Cross Site Scripting Vulnerability in MiniCMS v.1.10 allows attacker to execute arbitrary code via a crafted get request.

    KritikCVSS 9,6İstismar yokEPSS %0

    1234n · minicms24 Şub 2023

  • CVE-2018-9092
    36İzleyin

    There is a CSRF vulnerability in mc-admin/conf.php in MiniCMS 1.10 that can change the administrator account password.

    YüksekCVSS 8,8Kavram kanıtıEPSS %2

    1234n · minicms27 Mar 2018

  • CVE-2022-33121
    32İzleyin

    A Cross-Site Request Forgery (CSRF) in MiniCMS v1.11 allows attackers to arbitrarily delete local .dat files via clicking on a malicious lin

    YüksekCVSS 8,1İstismar yokEPSS %0

    1234n · minicms24 Haz 2022

  • CVE-2020-36051
    31İzleyin

    Directory traversal vulnerability in page_edit.php in MiniCMS V1.10 allows remote attackers to read arbitrary files via the state parameter.

    YüksekCVSS 7,5İstismar yokEPSS %1

    1234n · minicms5 Oca 2021

  • CVE-2018-18891
    30İzleyin

    MiniCMS 1.10 allows file deletion via /mc-admin/post.php?state=delete&delete= because the authentication check occurs too late.

    YüksekCVSS 7,5İstismar yokEPSS %1

    1234n · minicms31 Eki 2018

  • CVE-2024-9281
    27İzleyin

    bg5sbk MiniCMS post-edit.php cross-site request forgery

    OrtaCVSS 6,9İstismar yokEPSS %0

    1234n · minicms27 Eyl 2024

  • CVE-2024-9282
    27İzleyin

    bg5sbk MiniCMS page-edit.php cross-site request forgery

    OrtaCVSS 6,9İstismar yokEPSS %0

    1234n · minicms27 Eyl 2024

  • CVE-2019-9603
    26İzleyin

    MiniCMS 1.10 allows mc-admin/post.php?state=publish&delete= CSRF to delete articles, a different vulnerability than CVE-2018-18891.

    OrtaCVSS 6,5İstismar yokEPSS %0

    1234n · minicms6 Mar 2019

  • CVE-2018-1000638
    25İzleyin

    MiniCMS version 1.1 contains a Cross Site Scripting (XSS) vulnerability in http://example.org/mc-admin/page.php?date={payload} that can resu

    OrtaCVSS 6,1Kavram kanıtıEPSS %2

    1234n · minicms20 Ağu 2018

  • CVE-2020-17999
    24İzleyin

    Cross Site Scripting (XSS) in MiniCMS v1.10 allows remote attackers to execute arbitrary code by injecting commands via a crafted HTTP reque

    OrtaCVSS 6,1İstismar yokEPSS %1

    1234n · minicms28 Nis 2021

  • CVE-2018-15899
    24İzleyin

    An issue was discovered in MiniCMS 1.10.

    OrtaCVSS 6,1İstismar yokEPSS %0

    1234n · minicms27 Ağu 2018

  • CVE-2018-20520
    24İzleyin

    MiniCMS V1.10 has XSS via the mc-admin/post-edit.php query string, a related issue to CVE-2018-10296 and CVE-2018-16233.

    OrtaCVSS 6,1İstismar yokEPSS %0

    1234n · minicms27 Ara 2018

  • CVE-2018-16233
    24İzleyin

    MiniCMS V1.10 has XSS via the mc-admin/post-edit.php tags parameter.

    OrtaCVSS 6,1İstismar yokEPSS %0

    1234n · minicms30 Ağu 2018

  • CVE-2018-16298
    24İzleyin

    An issue was discovered in MiniCMS 1.10.

    OrtaCVSS 6,1İstismar yokEPSS %0

    1234n · minicms31 Ağu 2018

  • CVE-2018-17039
    24İzleyin

    MiniCMS 1.10, when Internet Explorer is used, allows XSS via a crafted URI because $_SERVER['REQUEST_URI'] is mishandled.

    OrtaCVSS 6,1İstismar yokEPSS %0

    1234n · minicms14 Eyl 2018

  • CVE-2019-13186
    24İzleyin

    In MiniCMS V1.10, stored XSS was found in mc-admin/post-edit.php via the tags box.

    OrtaCVSS 6,1İstismar yokEPSS %0

    1234n · minicms3 Tem 2019

  • CVE-2018-10296
    24İzleyin

    MiniCMS V1.10 has XSS via the mc-admin/post-edit.php title parameter.

    OrtaCVSS 6,1İstismar yokEPSS %0

    1234n · minicms22 Nis 2018

  • CVE-2021-41663
    24İzleyin

    A cross-site scripting (XSS) vulnerability exists in Mini CMS V1.11.

    OrtaCVSS 6,1İstismar yokEPSS %0

    1234n · minicms13 Haz 2022

  • CVE-2024-31741
    24İzleyin

    Cross Site Scripting vulnerability in MiniCMS v.1.11 allows a remote attacker to run arbitrary code via crafted string in the URL after logi

    OrtaCVSS 6,1İstismar yokEPSS %0

    1234n · minicms26 Nis 2024

  • CVE-2025-15455
    22İzleyin

    bg5sbk MiniCMS File Recovery Request page.php delete_page improper authentication

    OrtaCVSS 5,5İstismar yokEPSS %0

    1234n · minicms5 Oca 2026

  • CVE-2025-15458
    22İzleyin

    bg5sbk MiniCMS Article post-edit.php improper authentication

    OrtaCVSS 5,5İstismar yokEPSS %0

    1234n · minicms5 Oca 2026

  • CVE-2025-15457
    22İzleyin

    bg5sbk MiniCMS Trash File Restore post.php improper authentication

    OrtaCVSS 5,5İstismar yokEPSS %0

    1234n · minicms5 Oca 2026