Lucene search
PRIOn knowledge basePRION:CVE-2018-7046HistoryFeb 20, 2018 - 3:29 p.m.
Remote code execution
2018-02-2015:29:00
PRIOn knowledge base
www.prio-n.com
5
DISPUTED Arbitrary code execution vulnerability in Kentico 9 through 11 allows remote authenticated users to execute arbitrary operating system commands in a dynamic .NET code evaluation context via C# code in a “Pages -> Edit -> Template -> Edit template properties -> Layout” box. NOTE: the vendor has responded that there is intended functionality for authorized users to edit and update ascx code layout.
| CPE | Name | Operator | Version |
|---|---|---|---|
| kentico_cms | ge | 9.0 | |
| kentico_cms | le | 11.0 |
Related
cve
cve
CVE-2018-7046
2018-02-20 15:29:00
cvelist
cvelist
CVE-2018-7046
2018-02-20 15:00:00
zdt
zdt
Kentico CMS 11 Arbitrary Code Execution Vulnerability
2018-02-20 00:00:00
packetstorm
packetstorm
Kentico CMS 11 Arbitrary Code Execution
2018-02-19 00:00:00
nvd
nvd
CVE-2018-7046
2018-02-20 15:29:00