Skip to content
OpenAdvisories
Unscored CVE-2018-10423 EUVD-2018-2495GHSA-rp5p-hw36-9862

mc-admin/post.php in MiniCMS 1.10 allows remote attackers to obtain a directory listing of the top-level directory of the web root via a li…

Published Apr 26, 2018 · Updated Sep 16, 2024 · Assigned by mitre

Description

mc-admin/post.php in MiniCMS 1.10 allows remote attackers to obtain a directory listing of the top-level directory of the web root via a link that becomes available after posting an article.

References