CVE-2015-0553

Description

References

• packetstormsecurity.com/files/130008/CMS-Websitebaker-2.8.3-SP3-Cross-Site-Scripting.html · Exploit
• seclists.org/fulldisclosure/2015/Jan/70 · Exploit
• sroesemann.blogspot.de/2015/01/report-for-advisory-sroeadv-2015-03.html · Exploit
• sroesemann.blogspot.de/2015/01/sroeadv-2015-03_4.html · Exploit
• securityfocus.com/bid/72104 · Exploit
• twitter.com/sroesemann/status/555397239229911040 · Exploit

Weitere Schwachstellen in websitebaker

• CVE-2021-47788HOCH 8.8WebsiteBaker 2.13.0 contains an authenticated remote code execution vulnerability that allows users with language editing permissions to exe…
• CVE-2023-53953MITTEL 5.4WebsiteBaker 2.13.3 contains a stored cross-site scripting vulnerability that allows authenticated users to inject malicious scripts when cr…
• CVE-2023-53903MITTEL 5.4WebsiteBaker 2.13.3 contains a stored cross-site scripting vulnerability that allows authenticated users to upload malicious SVG files with …
• CVE-2023-53902MITTEL 6.5WebsiteBaker 2.13.3 contains a directory traversal vulnerability that allows authenticated attackers to delete arbitrary files by manipulati…
• CVE-2020-25990KRITISCH 9.8WebsiteBaker 2.12.2 allows SQL Injection via parameter 'display_name' in /websitebaker/admin/preferences/save.php. Exploiting this issue cou…