CVE-2015-5520

概要

参考情報

• docs.orchardproject.net/Documentation/Patch-20150630 · Patch
• packetstormsecurity.com/files/132583/Orchard-CMS-1.9.0-1.8.2-1.7.3-Cross-Site-Scripting.html · Exploit
• seclists.org/fulldisclosure/2015/Jul/32 · Exploit
• projectzero.gr/en/2015/07/orchard-persistent-xss-vulnerability · Exploit
• exploit-db.com/exploits/37533 · Exploit

orchard のその他の脆弱性

• CVE-2020-29593中 5.4An issue was discovered in Orchard before 1.10. The Media Settings Allowed File Types list field allows an attacker to add a XSS payload tha…
• CVE-2020-29592緊急 9.8An issue was discovered in Orchard before 1.10. A broken access control issue in Orchard components that use the TinyMCE HTML editor's file …
• CVE-2013-3645中 4.3Cross-site scripting (XSS) vulnerability in the Orchard.Comments module in Orchard before 1.6.1 allows remote attackers to inject arbitrary …
• CVE-2011-5252中 5.8Open redirect vulnerability in Users/Account/LogOff in Orchard 1.0.x before 1.0.21, 1.1.x before 1.1.31, 1.2.x before 1.2.42, and 1.3.x befo…