GCVE - cpe:2.3:a:1234n:minicms:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:1234n:minicms:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	1234N (`42d786fd-f03f-5596-a515-3a65bf61c2df`)
Product	Minicms (`7336144d-0a5a-57a5-a87c-895ca351215c`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from purl2cpe mapping

PURL mappings

PURL	Source	Last updated
`pkg:github/bg5sbk/minicms`	purl2cpe	2026-06-01 10:12:27.683856

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2025-15458`	vulnerable	2026-06-08 07:06:36.269829	bg5sbk MiniCMS Article post-edit.php improper authentication HIGH (7.3) A vulnerability was determined in bg5sbk MiniCMS up to 1.8. This affects an unknown function of the file /mc-admin/post-edit.php of the component Article Handler. Executing a manipulation can lead to improper authentication. It is possible to launch the attack remotely. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way. Published: 2026-01-05T05:02:06.060Z Updated: 2026-02-23T08:17:12.079Z Open on db.gcve.eu Reference links https://vuldb.com/?id.339491 https://vuldb.com/?ctiid.339491 https://vuldb.com/?submit.725142 https://github.com/ueh1013/VULN/issues/9	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-15457`	vulnerable	2026-06-08 07:06:36.269468	bg5sbk MiniCMS Trash File Restore post.php improper authentication HIGH (7.3) A vulnerability was found in bg5sbk MiniCMS up to 1.8. The impacted element is an unknown function of the file /minicms/mc-admin/post.php of the component Trash File Restore Handler. Performing a manipulation results in improper authentication. It is possible to initiate the attack remotely. The exploit has been made public and could be used. The vendor was contacted early about this disclosure but did not respond in any way. Published: 2026-01-05T04:32:05.450Z Updated: 2026-02-23T08:16:59.343Z Open on db.gcve.eu Reference links https://vuldb.com/?id.339490 https://vuldb.com/?ctiid.339490 https://vuldb.com/?submit.725139 https://github.com/ueh1013/VULN/issues/12	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-15456`	vulnerable	2026-06-08 07:06:36.268837	bg5sbk MiniCMS Publish page-edit.php improper authentication HIGH (7.3) A vulnerability has been found in bg5sbk MiniCMS up to 1.8. The affected element is an unknown function of the file /mc-admin/page-edit.php of the component Publish Page Handler. Such manipulation leads to improper authentication. The attack may be performed from remote. The exploit has been disclosed to the public and may be used. The existence of this vulnerability is still disputed at present. The vendor was contacted early about this disclosure but did not respond in any way. Published: 2026-01-05T04:02:06.770Z Updated: 2026-02-23T08:16:46.676Z Open on db.gcve.eu Reference links https://vuldb.com/?id.339489 https://vuldb.com/?ctiid.339489 https://vuldb.com/?submit.725138 https://github.com/ueh1013/VULN/issues/13	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-15455`	vulnerable	2026-06-08 07:06:36.264779	bg5sbk MiniCMS File Recovery Request page.php delete_page improper authentication MEDIUM (6.5) A flaw has been found in bg5sbk MiniCMS up to 1.8. Impacted is the function delete_page of the file /minicms/mc-admin/page.php of the component File Recovery Request Handler. This manipulation causes improper authentication. The attack is possible to be carried out remotely. The exploit has been published and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Published: 2026-01-05T03:32:06.205Z Updated: 2026-02-23T08:16:35.012Z Open on db.gcve.eu Reference links https://vuldb.com/?id.339488 https://vuldb.com/?ctiid.339488 https://vuldb.com/?submit.725137 https://github.com/ueh1013/VULN/issues/14	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-9282`	vulnerable	2026-06-08 07:00:27.056818	bg5sbk MiniCMS page-edit.php cross-site request forgery MEDIUM (4.3) A vulnerability was found in bg5sbk MiniCMS 1.11. It has been classified as problematic. Affected is an unknown function of the file page-edit.php. The manipulation leads to cross-site request forgery. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The initial researcher advisory mentions confusing version and file name information. The vendor was contacted early about this disclosure but did not respond in any way. Published: 2024-09-27T13:00:07.408Z Updated: 2024-09-27T14:33:07.666Z Open on db.gcve.eu Reference links https://vuldb.com/?id.278664 https://vuldb.com/?ctiid.278664 https://vuldb.com/?submit.411165 https://github.com/bg5sbk/MiniCMS/issues/52	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-9281`	vulnerable	2026-06-08 07:00:27.056179	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.