Sign in Subscribe

← All advisories

Unrated severityNVD Advisory· Published Nov 1, 2018· Updated Sep 17, 2024

CVE-2018-18892

CVE-2018-18892

Description

MiniCMS 1.10 allows execution of arbitrary PHP code via the install.php sitename parameter, which affects the site_name field in mc_conf.php.

Affected products

2

Minicms/Minicmsinferred2 versions
=1.10+ 1 more
- (no CPE)range: =1.10
- (no CPE)range: =1.10

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

2

github.com/AvaterXXX/MiniCms/blob/master/Command%20Execution.mdmitrex_refsource_MISC
www.patec.cn/newsshow.phpmitrex_refsource_MISC

News mentions

0

No linked articles in our index yet.