CVE-2010-5051

概要

参考情報

• secunia.com/advisories/39961 · Vendor Advisory
• htbridge.ch/advisory/xss_vulnerability_in_razorcms.html · Exploit
• securityfocus.com/archive/1/511457/100/0/threaded
• securityfocus.com/bid/40373 · Exploit

razorcms のその他の脆弱性

• CVE-2018-19906中 5.4Stored XSS exists in razorCMS 3.4.8 via the /#/page description parameter.
• CVE-2018-19905中 5.4HTML injection exists in razorCMS 3.4.8 via the /#/page keywords parameter.
• CVE-2018-17986高 8.8rars/user/data in razorCMS 3.4.8 allows CSRF for changing the password of an admin user.
• CVE-2018-16727中 5.4razorCMS 3.4.7 allows Stored XSS via the keywords of the homepage within the settings component.
• CVE-2018-16726中 5.4razorCMS 3.4.7 allows HTML injection via the description of the homepage within the settings component.