Vulnerabilities > 1234N > Minicms > High
DATE | CVE | VULNERABILITY TITLE | RISK |
---|---|---|---|
2022-06-28 | CVE-2020-19896 | Unspecified vulnerability in 1234N Minicms 1.9 File inclusion vulnerability in Minicms v1.9 allows remote attackers to execute arbitary PHP code via post-edit.php. | 7.5 |
2021-01-05 | CVE-2020-36052 | Path Traversal vulnerability in 1234N Minicms 1.10 Directory traversal vulnerability in post-edit.php in MiniCMS V1.10 allows remote attackers to include and execute arbitrary files via the state parameter. | 7.5 |
2018-11-01 | CVE-2018-18892 | Code Injection vulnerability in 1234N Minicms 1.10 MiniCMS 1.10 allows execution of arbitrary PHP code via the install.php sitename parameter, which affects the site_name field in mc_conf.php. | 7.5 |