CVE-2015-5520

Mô tả

Tham khảo

• docs.orchardproject.net/Documentation/Patch-20150630 · Patch
• packetstormsecurity.com/files/132583/Orchard-CMS-1.9.0-1.8.2-1.7.3-Cross-Site-Scripting.html · Exploit
• seclists.org/fulldisclosure/2015/Jul/32 · Exploit
• projectzero.gr/en/2015/07/orchard-persistent-xss-vulnerability · Exploit
• exploit-db.com/exploits/37533 · Exploit

Lỗ hổng khác của orchard

• CVE-2020-29593TRUNG BÌNH 5.4An issue was discovered in Orchard before 1.10. The Media Settings Allowed File Types list field allows an attacker to add a XSS payload tha…
• CVE-2020-29592NGHIÊM TRỌNG 9.8An issue was discovered in Orchard before 1.10. A broken access control issue in Orchard components that use the TinyMCE HTML editor's file …
• CVE-2013-3645TRUNG BÌNH 4.3Cross-site scripting (XSS) vulnerability in the Orchard.Comments module in Orchard before 1.6.1 allows remote attackers to inject arbitrary …
• CVE-2011-5252TRUNG BÌNH 5.8Open redirect vulnerability in Users/Account/LogOff in Orchard 1.0.x before 1.0.21, 1.1.x before 1.1.31, 1.2.x before 1.2.42, and 1.3.x befo…