Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2975▼ 108 respecto a la semana anterior

Críticas / altas1449▲ 87 respecto a la semana anterior

Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior

Sin puntuar (sin CVSS)350▼ 160 respecto a la semana anterior

36 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2018-17039	Modificada	Media (6.1)	0.86%	—	1234n Minicms	14/9/2018	17/6/2026	MiniCMS 1.10, when Internet Explorer is used, allows XSS via a crafted URI because $_SERVER['REQUEST_URI'] is mishandled.
CVE-2018-16298	Modificada	Media (6.1)	0.86%	—	1234n Minicms	31/8/2018	17/6/2026	An issue was discovered in MiniCMS 1.10. There is an mc-admin/post.php?tag= XSS vulnerability for a state=delete, state=draft, or state=publish request.
CVE-2018-16233	Modificada	Media (6.1)	0.86%	—	1234n Minicms	30/8/2018	17/6/2026	MiniCMS V1.10 has XSS via the mc-admin/post-edit.php tags parameter.
CVE-2018-15899	Modificada	Media (6.1)	0.88%	—	1234n Minicms	27/8/2018	17/6/2026	An issue was discovered in MiniCMS 1.10. There is a post.php?date= XSS vulnerability.
CVE-2018-1000638	Modificada	Media (6.1)	2.2%	💥 Exploit	1234n Minicms	20/8/2018	17/6/2026	MiniCMS version 1.1 contains a Cross Site Scripting (XSS) vulnerability in http://example.org/mc-admin/page.php?date={payload} that can result in code injection.
CVE-2018-10424	Modificada	Baja (2.7)	0.93%	—	1234n Minicms	26/4/2018	17/6/2026	mc-admin/post-edit.php in MiniCMS 1.10 allows full path disclosure via a modified id field.
CVE-2018-10423	Modificada	Baja (2.7)	1.3%	—	1234n Minicms	26/4/2018	17/6/2026	mc-admin/post.php in MiniCMS 1.10 allows remote attackers to obtain a directory listing of the top-level directory of the web root via a link that becomes available after posting an article.
CVE-2018-10296	Modificada	Media (6.1)	0.79%	—	1234n Minicms	22/4/2018	17/6/2026	MiniCMS V1.10 has XSS via the mc-admin/post-edit.php title parameter.
CVE-2018-10227	Modificada	Media (5.4)	0.66%	—	1234n Minicms	19/4/2018	17/6/2026	MiniCMS v1.10 has XSS via the mc-admin/conf.php site_link parameter.
CVE-2018-9092	Modificada	Alta (8.8)	2.7%	💥 Exploit	1234n Minicms	27/3/2018	17/6/2026	There is a CSRF vulnerability in mc-admin/conf.php in MiniCMS 1.10 that can change the administrator account password.
CVE-2012-5231	Modificada	Alta (7.5)	2.7%	💥 Exploit	Jessgramp Minicms	1/10/2012	16/6/2026	miniCMS 1.0 and 2.0 allows remote attackers to execute arbitrary PHP code via a crafted (1) pagename or (2) area variable containing an executable extension, which is not properly handled by (a) update.php when writing files to content/, or (b) updatenews.php when writing files to content/news/.