CVE-2015-1041

Description

References

• packetstormsecurity.com/files/129872/CMS-e107-1.0.4-Cross-Site-Scripting.html · Exploit
• seclists.org/fulldisclosure/2015/Jan/18 · Exploit
• sroesemann.blogspot.de/2014/12/sroeadv-2014-05.html · Not Applicable
• sroesemann.blogspot.de/2015/01/report-for-advisory-sroeadv-2014-05.html · Not Applicable
• openwall.com/lists/oss-security/2015/01/11/6 · Mailing List
• securityfocus.com/bid/71977 · Third Party Advisory
• exchange.xforce.ibmcloud.com/vulnerabilities/99898
• e107inc/e107v1 · Issue Tracking

Weitere Schwachstellen in e107

• CVE-2022-50939HOCH 7.2e107 CMS version 3.2.1 contains a critical file upload vulnerability that allows authenticated administrators to override arbitrary server f…
• CVE-2022-50916HOCH 7.2e107 CMS version 3.2.1 contains a file upload vulnerability that allows authenticated administrators to override server files through the Me…
• CVE-2022-50907HOCH 7.2e107 CMS version 3.2.1 contains a file upload vulnerability that allows authenticated administrative users to bypass upload restrictions and…
• CVE-2022-50906MITTEL 4.8e107 CMS 3.2.1 contains an upload restriction bypass vulnerability that allows authenticated administrators to upload malicious SVG files th…
• CVE-2022-50905MITTEL 6.1e107 CMS version 3.2.1 contains multiple vulnerabilities that allow cross-site scripting (XSS) attacks. The first vulnerability is a reflect…