PT-2026-1212 · Minicms · Minicms

Blackooo · Publicado 2026-01-05 · Atualizado 2026-01-10 · CVE-2025-15458

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions bg5sbk MiniCMS versions up to 1.8

Description A flaw exists in bg5sbk MiniCMS that can lead to improper authentication. The issue affects an unknown function within the Article Handler component, specifically in the file /mc-admin/post-edit.php. It is possible to exploit this issue remotely by executing a manipulation. The exploit has been publicly disclosed. The vendor was informed of this disclosure but did not respond.

Recommendations Versions prior to 1.8 should be updated. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Improper Authentication

Enumeração de Fraquezas

CWE-287

Identificadores relacionados

CVE-2025-15458

Produtos afetados

Minicms

Referências · 12

• 🔥 https://github.com/ueh1013/VULN/issues/9 · Exploit
• https://twitter.com/VulmonFeeds/status/2008049118132785470 · Publicação no Twitter
• https://t.me/CVEtracker/41347 · Publicação no Telegram
• https://nvd.nist.gov/vuln/detail/CVE-2025-15458 · Nota de Segurança
• https://vuldb.com/?submit.725142 · Nota
• https://osv.dev/vulnerability/CVE-2025-15458 · Aviso do Fabricante
• https://twitter.com/CVEnew/status/2008055070693249246 · Publicação no Twitter
• https://vuldb.com/?ctiid.339491 · Nota
• https://t.me/cveNotify/147674 · Publicação no Telegram
• https://twitter.com/cracbot/status/2009218585332470126 · Publicação no Twitter
• https://vuldb.com/?id.339491 · Nota
• https://twitter.com/cracbot/status/2009943351152521433 · Publicação no Twitter