CVE-2012-1900

Mô tả

Tham khảo

• packetstormsecurity.org/files/110593/RazorCMS-1.2.1-STABLE-Cross-Site-Request-Forgery.html · Exploit
• exploit-db.com/exploits/18575 · Exploit
• exchange.xforce.ibmcloud.com/vulnerabilities/73902

Lỗ hổng khác của razorcms

• CVE-2018-19906TRUNG BÌNH 5.4Stored XSS exists in razorCMS 3.4.8 via the /#/page description parameter.
• CVE-2018-19905TRUNG BÌNH 5.4HTML injection exists in razorCMS 3.4.8 via the /#/page keywords parameter.
• CVE-2018-17986CAO 8.8rars/user/data in razorCMS 3.4.8 allows CSRF for changing the password of an admin user.
• CVE-2018-16727TRUNG BÌNH 5.4razorCMS 3.4.7 allows Stored XSS via the keywords of the homepage within the settings component.
• CVE-2018-16726TRUNG BÌNH 5.4razorCMS 3.4.7 allows HTML injection via the description of the homepage within the settings component.