mc-admin/post-edit.php in MiniCMS 1.10 allows full path disclosure via a modified id field.
References
Link | Resource |
---|---|
https://github.com/bg5sbk/MiniCMS/issues/18 | Exploit Third Party Advisory |
Configurations
Information
Published : 2018-04-25 22:29
Updated : 2018-10-30 09:28
NVD link : CVE-2018-10424
Mitre link : CVE-2018-10424
JSON object : View
CWE
CWE-200
Exposure of Sensitive Information to an Unauthorized Actor
Products Affected
1234n
- minicms