Lucene search
PRIOn knowledge basePRION:CVE-2018-5282HistoryJan 08, 2018 - 9:29 a.m.
Stack overflow
2018-01-0809:29:00
PRIOn knowledge base
www.prio-n.com
3
0.002 Low
EPSS
Percentile
53.2%
DISPUTED Kentico 9.0 through 11.0 has a stack-based buffer overflow via the SqlName, SqlPswd, Database, UserName, or Password field in a SilentInstall XML document. NOTE: the vendor disputes this issue because neither a buffer overflow nor a crash can be reproduced; also, reading XML documents is implemented exclusively with managed code within the Microsoft .NET Framework.
| CPE | Name | Operator | Version |
|---|---|---|---|
| kentico_cms | ge | 9.0 | |
| kentico_cms | le | 11.0 |
Related
packetstorm
packetstorm
Kentico CMS 11.0 Stack Buffer Overflow
2018-01-12 00:00:00
cvelist
cvelist
CVE-2018-5282
2018-01-08 09:00:00
cve
cve
CVE-2018-5282
2018-01-08 09:29:00
zdt
zdt
Kentico CMS 11.0 - Buffer Overflow Vulnerability
2018-01-12 00:00:00
exploitpack
exploitpack
Kentico CMS 11.0 - Buffer Overflow
2018-01-12 00:00:00
nvd
nvd
CVE-2018-5282
2018-01-08 09:29:00
exploitdb
exploitdb
Kentico CMS 11.0 - Buffer Overflow
2018-01-12 00:00:00