CVE-2015-1562

MEDIUM 4.3CVE-2015-1562 · Published 09/02/2015 · updated 17/06/2026

In short

CVE-2015-1562 is a MEDIUM (CVSS 4.3) vulnerability affecting saurus cms (saurus).
Chance of exploitation in the next 30 days (EPSS): 1.9%, higher than 79.3% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
saurus cms saurus	`= 4.7.0`	No fix yet

Description

Multiple cross-site scripting (XSS) vulnerabilities in Saurus CMS 4.7.0 allow remote attackers to inject arbitrary web script or HTML via the (1) search parameter to admin/user_management.php, (2) data_search parameter to /admin/profile_data.php, or (3) filter parameter to error_log.php.

References

seclists.org/fulldisclosure/2015/Jan/112 · Exploit
sroesemann.blogspot.de/2015/01/report-for-advisory-sroeadv-2015-05.html · Exploit
sroesemann.blogspot.de/2015/01/sroeadv-2015-05.html
openwall.com/lists/oss-security/2015/01/28/8 · Exploit
sauruscms/Saurus-CMS-Community-Edition commit 8dec044

More vulnerabilities in saurus cms

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free