Mini Pub

mini-pub

Vendor: Mini Pub • 5 CVEs

CVEs (5)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2008-5936 1Mini Pub 1Mini Pub Apr 23, 2026 Jan 22, 2009 N/A· v4 N/A· v3 5.0 MEDIUM· v2 front-end/edit.php in mini-pub 0.3 and earlier allows remote attackers to read files and obtain PHP source code via a filename in the sFileName parameter.
CVE-2008-5883 1Mini Pub 1Mini Pub Apr 23, 2026 Jan 12, 2009 N/A· v4 N/A· v3 7.8 HIGH· v2 Absolute path traversal vulnerability in front-end/dir.php in mini-pub 0.3 and earlier allows remote attackers to list arbitrary directories via a full pathname in the sDir parameter.
CVE-2008-5581 1Mini Pub 1Mini Pub Apr 23, 2026 Dec 15, 2008 N/A· v4 N/A· v3 7.5 HIGH· v2 PHP remote file inclusion vulnerability in mini-pub.php/front-end/img.php in mini-pub 0.3 allows remote attackers to execute arbitrary PHP code via a URL in the sFileName parameter.
CVE-2008-5580 1Mini Pub 1Mini Pub Apr 23, 2026 Dec 15, 2008 N/A· v4 N/A· v3 7.5 HIGH· v2 mini-pub.php/front-end/cat.php in mini-pub 0.3 allows remote attackers to execute arbitrary commands via shell metacharacters in the sFileName argument.
CVE-2008-5579 1Mini Pub 1Mini Pub Apr 23, 2026 Dec 15, 2008 N/A· v4 N/A· v3 5.0 MEDIUM· v2 Absolute path traversal vulnerability in mini-pub.php/front-end/cat.php in mini-pub 0.3 allows remote attackers to read arbitrary files via a full pathname in the sFileName parameter.