CVE-2014-4737

概要

参考情報

• packetstormsecurity.com/files/128519/Textpattern-4.5.5-Cross-Site-Scripting.html · Exploit
• textpattern.com/weblog/379/textpattern-cms-457-released-ten-years-on · Exploit
• securityfocus.com/archive/1/533596/100/0/threaded
• exchange.xforce.ibmcloud.com/vulnerabilities/96802
• htbridge.com/advisory/HTB23223 · Exploit

textpattern のその他の脆弱性

• CVE-2026-30452中 6.5Textpattern CMS 4.9.0 contains a Broken Access Control vulnerability in the article management system that allows authenticated users with l…
• CVE-2026-32986中 6.1Textpattern CMS version 4.9.0 contains a second-order cross-site scripting vulnerability that allows attackers to inject malicious scripts b…
• CVE-2023-53911中 5.4Textpattern CMS 4.8.8 contains a stored cross-site scripting vulnerability in the article excerpt field that allows authenticated users to i…
• CVE-2023-50038高 8.8There is an arbitrary file upload vulnerability in the background of textpattern cms v4.8.8, which leads to the loss of server permissions.
• CVE-2023-36220高 7.2Directory Traversal vulnerability in Textpattern CMS v4.8.8 allows a remote authenticated attacker to execute arbitrary code and gain access…