CVE-2012-1826

2012-06-08T12:55:00
ID CVE-2012-1826
Type cve
Reporter NVD
Modified 2012-11-26T23:41:22

Description

dotCMS 1.9 before 1.9.5.1 allows remote authenticated users to execute arbitrary Java code via a crafted (1) XSLT or (2) Velocity template.