CVE-2012-5358

Mô tả

Tham khảo

• documentation.ektron.com/current/ReleaseNotes/Release8/8.02SP5.htm · Issue Tracking
• technet.microsoft.com/library/security/msvr12-016 · Issue Tracking
• webstersprodigy.net/2012/10/25/cve-2012-5357cve-1012-5358-cool-ektron-xslt-rce-bugs · Exploit

Lỗ hổng khác của ektron content management system

• CVE-2012-5357NGHIÊM TRỌNG 9.8Ektron Content Management System (CMS) before 8.02 SP5 uses the XslCompiledTransform class with enablescript set to true, which allows remot…
• CVE-2016-6133TRUNG BÌNH 6.1Cross-site scripting (XSS) vulnerability in Ektron Content Management System before 9.1.0.184SP3(9.1.0.184.3.127) allows remote attackers to…
• CVE-2016-6201TRUNG BÌNH 6.1Cross-site scripting (XSS) vulnerability in Ektron Content Management System (CMS) before 9.1.0.184 SP3 (9.1.0.184.3.127) allows remote atta…
• CVE-2015-4427THẤP 3.5Multiple cross-site scripting (XSS) vulnerabilities in Test/WorkArea/workarea.aspx in Ektron Content Management System (CMS) before 9.10 SP1…
• CVE-2015-3624TRUNG BÌNH 5.8Cross-site request forgery (CSRF) vulnerability in Test/WorkArea/DmsMenu/menuActions/MenuActions.aspx in Ektron Content Management System (C…