CVE-2015-1053

概要

参考情報

• packetstormsecurity.com/files/129916/CMS-Croogo-2.2.0-Cross-Site-Scripting.html · Exploit
• seclists.org/fulldisclosure/2015/Jan/24 · Exploit
• sroesemann.blogspot.de/2015/01/report-for-advisory-sroeadv-2015-02.html · Exploit
• sroesemann.blogspot.de/2015/01/sroeadv-2015-02.html · Exploit
• securityfocus.com/bid/71999 · Exploit
• blog.croogo.org/blog/croogo-221-released · Patch
• exchange.xforce.ibmcloud.com/vulnerabilities/99890
• croogo/croogo

croogo のその他の脆弱性

• CVE-2024-42718中 6.5A path traversal vulnerability in Croogo CMS 4.0.7 allows remote attackers to read arbitrary files via a specially crafted path in the 'edit…
• CVE-2024-29643緊急 9.1An issue in croogo v.3.0.2 allows an attacker to perform Host header injection via the feed.rss component.
• CVE-2021-44673高 8.8A Remote Code Execution (RCE) vulnerability exists in Croogo 3.0.2via admin/file-manager/attachments, which lets a malicoius user upload a w…
• CVE-2019-20789中 4.8Croogo before 3.0.7 allows XSS via the title to admin/menus/menus or admin/taxonomy/vocabularies.
• CVE-2019-7173中 4.8A stored-self XSS exists in Croogo through v3.0.5, allowing an attacker to execute HTML or JavaScript code in a vulnerable Title field to /a…