VULNERABILITY INTELLIGENCE

CVE-2018-10423

CVSS score2.7 LOW
EPSS probability1.28%
CISA KEVNot currently listed
Published2018-04-26
Last modified2026-06-17
CVSS vectorCVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N

Description

mc-admin/post.php in MiniCMS 1.10 allows remote attackers to obtain a directory listing of the top-level directory of the web root via a link that becomes available after posting an article.

Weakness classification

  • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor

Primary references