CVE-2012-5357

Description

References

• documentation.ektron.com/current/ReleaseNotes/Release8/8.02SP5.htm · Issue Tracking
• technet.microsoft.com/library/security/msvr12-016 · Issue Tracking
• webstersprodigy.net/2012/10/25/cve-2012-5357cve-1012-5358-cool-ektron-xslt-rce-bugs · Exploit
• rapid7.com/db/modules/exploit/windows/http/ektron_xslt_exec · Exploit

ektron content management system 的其他漏洞

• CVE-2012-5358严重 9.8The XSLTCompiledTransform function in Ektron Content Management System (CMS) before 8.02 SP5 configures the XSL with enableDocumentFunction …
• CVE-2016-6133中危 6.1Cross-site scripting (XSS) vulnerability in Ektron Content Management System before 9.1.0.184SP3(9.1.0.184.3.127) allows remote attackers to…
• CVE-2016-6201中危 6.1Cross-site scripting (XSS) vulnerability in Ektron Content Management System (CMS) before 9.1.0.184 SP3 (9.1.0.184.3.127) allows remote atta…
• CVE-2015-4427低危 3.5Multiple cross-site scripting (XSS) vulnerabilities in Test/WorkArea/workarea.aspx in Ektron Content Management System (CMS) before 9.10 SP1…
• CVE-2015-3624中危 5.8Cross-site request forgery (CSRF) vulnerability in Test/WorkArea/DmsMenu/menuActions/MenuActions.aspx in Ektron Content Management System (C…