| タイトル | MiniCMS https://github.com/bg5sbk/MiniCMS V1.8 unauthorized vulnerability |
|---|
| 説明 | •Unauthorized vulnerabilities are critical security risks where attackers can bypass authentication to directly access or manipulate target systems, interfaces, and data. These exploits enable theft of sensitive server configurations, plaintext database information, and user privacy data. Attackers may also alter website content, implant malicious code, or even delete core business data, potentially causing service disruptions.
•If the vulnerability affects backend management functions, attackers can directly gain system privileges, further implanting mining programs and launching DDoS attacks. This may also expose enterprises to data breach compliance liabilities, damaging brand credibility, and triggering user trust crises along with financial losses.
DESCRIPTION
•The /post-edit.php file in MiniCMS v1.8 contains a critical unauthenticated vulnerability. This flaw enables attackers to bypass authentication and bypass cookies by crafting POST requests to access article editing and publishing interfaces. Attackers can arbitrarily submit requests with titles, content, and other information, successfully publishing or altering website articles. Such vulnerabilities may lead to malicious content tampering, the insertion of harmful materials, and potential leakage of sensitive server and user data, resulting in severe consequences including business disruptions and regulatory compliance issues. These actions can significantly damage corporate brand credibility and user rights. |
|---|
| ソース | ⚠️ https://github.com/ueh1013/VULN/issues/9 |
|---|
| ユーザー | Blackooo (UID 93743) |
|---|
| 送信 | 2025年12月27日 11:41 (9 月 ago) |
|---|
| モデレーション | 2026年01月04日 11:28 (8 days later) |
|---|
| ステータス | 承諾済み |
|---|
| VulDBエントリ | 339491 [bg5sbk MiniCMS 迄 1.8 Article /mc-admin/post-edit.php 弱い認証] |
|---|
| ポイント | 20 |
|---|