CNNVD-202601-942 Information

CNNVD ID

CNNVD-202601-942

CVE-2025-15456

  • CNNVD Published: 2026-01-05

Description (Chinese)

MiniCMS是达达(bg5sbk)个人开发者的一个针对个人网站设计的微型内容管理系统。 MiniCMS 1.8及之前版本存在授权问题漏洞,该漏洞源于对组件Publish Page Handler的文件/mc-admin/page-edit.php的错误操作,可能导致身份验证不当。

Description (English)

MiniCMS is a micro-content management system designed for individual websites by the individual developer of Bg5sbk. MiniCMS 1.8 and previous versions have a mandate gap, which stems from the error in the document/mc-admin/page-edit.php of component Publish Page Handler, which may lead to improper authentication.

Hazard Level

Medium

Vulnerability Type

授权问题

Affected Vendor

个人开发者

Published

2026-01-05

Last Modified

2026-02-24

References

https://vuldb.com/?id.339489 https://github.com/ueh1013/VULN/issues/13 https://vuldb.com/?ctiid.339489 https://vuldb.com/?submit.725138 https://access.redhat.com/security/cve/cve-2025-15456

Patch

https://github.com/bg5sbk/MiniCMS/releases

Share on: