CVE-2014-9433

Mô tả

Tham khảo

• packetstormsecurity.com/files/129713/CMS-Contenido-4.9.5-Cross-Site-Scripting.html · Exploit
• seclists.org/fulldisclosure/2014/Dec/111 · Exploit
• secunia.com/advisories/61396
• sroesemann.blogspot.de/2014/12/report-for-advisory-sroeadv-2014-03.html · Exploit
• contenido.org/de/cms/CONTENIDO/News/index-c-2044-3.html · Vendor Advisory
• securityfocus.com/archive/1/534320/100/0/threaded
• exchange.xforce.ibmcloud.com/vulnerabilities/99497

Lỗ hổng khác của contendio

• CVE-2008-2911TRUNG BÌNH 4.3Multiple cross-site scripting (XSS) vulnerabilities in index.php in Contenido 4.8.4 allow remote attackers to inject arbitrary web script or…
• CVE-2006-5381TRUNG BÌNH 5.0Contenido CMS stores sensitive data under the web root with insufficient access control, which allows remote attackers to obtain database cr…
• CVE-2006-5380CAO 7.5Remote file inclusion vulnerability in Contenido CMS allows remote attackers to execute arbitrary PHP code via a URL in the contenido_path p…
• CVE-2005-4132CAO 7.5Unspecified "security leak" vulnerability in Contenido before 4.6.4, when register_globals is on and allow_url_fopen is true, has unspecifie…