CVE-2009-1461

概要

参考情報

• marc.info · Exploit
• razorcms.co.uk/support/viewtopic.php · Exploit
• securityfocus.com/bid/34854
• exchange.xforce.ibmcloud.com/vulnerabilities/50357

razorcms のその他の脆弱性

• CVE-2018-19906中 5.4Stored XSS exists in razorCMS 3.4.8 via the /#/page description parameter.
• CVE-2018-19905中 5.4HTML injection exists in razorCMS 3.4.8 via the /#/page keywords parameter.
• CVE-2018-17986高 8.8rars/user/data in razorCMS 3.4.8 allows CSRF for changing the password of an admin user.
• CVE-2018-16727中 5.4razorCMS 3.4.7 allows Stored XSS via the keywords of the homepage within the settings component.
• CVE-2018-16726中 5.4razorCMS 3.4.7 allows HTML injection via the description of the homepage within the settings component.