Open redirect

Open redirect vulnerability in lib/Cake/Controller/Controller.php in AdaptCMS 3.0.3 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the HTTP Referer header...

CVE-2015-1060

Open redirect vulnerability in lib/Cake/Controller/Controller.php in AdaptCMS 3.0.3 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the HTTP Referer header...

CVE-2015-1058

Multiple cross-site scripting XSS vulnerabilities in AdaptCMS 3.0.3 allow remote attackers to inject arbitrary web script or HTML via the 1 dataCategorytitle parameter to admin/categories/add, 2 dataFieldtitle parameter to admin/fields/ajaxfields/, 3 name property in a basicInfo JSON object to...

CVE-2015-1059

CVE-2015-1059 affects AdaptCMS 3.0.3 and is an unrestricted file upload vulnerability in admin/files/add that permits authenticated users to upload PHP scripts and execute arbitrary code by requesting the uploaded file from /app/webroot/uploads. The root cause is improper verification of uploaded...

CVE-2015-1059

Unrestricted file upload vulnerability in admin/files/add in AdaptCMS 3.0.3 allows remote authenticated users to execute arbitrary PHP code by uploading a file with a PHP extension, then accessing it via a direct request to the file in /app/webroot/uploads...

CVE-2015-1059

Unrestricted file upload vulnerability in admin/files/add in AdaptCMS 3.0.3 allows remote authenticated users to execute arbitrary PHP code by uploading a file with a PHP extension, then accessing it via a direct request to the file in /app/webroot/uploads...

CVE-2015-1058

Multiple cross-site scripting XSS vulnerabilities in AdaptCMS 3.0.3 allow remote attackers to inject arbitrary web script or HTML via the 1 dataCategorytitle parameter to admin/categories/add, 2 dataFieldtitle parameter to admin/fields/ajaxfields/, 3 name property in a basicInfo JSON object to...

CVE-2015-1060

CVE-2015-1060 affects AdaptCMS 3.0.3, specifically the file lib/Cake/Controller/Controller.php. The vulnerability is an open redirect caused by using the URL from the HTTP Referer header to redirect users, enabling remote attackers to guide victims to arbitrary sites and potentially conduct phish...

EUVD-2015-1203

Open redirect vulnerability in lib/Cake/Controller/Controller.php in AdaptCMS 3.0.3 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the HTTP Referer header...

CVE-2015-1058

CVE-2015-1058 affects AdaptCMS 3.0.3. The connected sources describe multiple cross-site scripting (XSS) vulnerabilities, allowing injection of arbitrary script/HTML via several fields (e.g., data[Category][title] in admin/categories/add, data[Field][title] in admin/fields/ajax_fields/, name in b...

CVE-2015-1060

Open redirect vulnerability in lib/Cake/Controller/Controller.php in AdaptCMS 3.0.3 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the HTTP Referer header...

PT-2015-5045

Name of the Vulnerable Software and Affected Versions AdaptCMS version 3.0.3 Description The issue allows remote attackers to inject arbitrary web script or HTML, potentially leading to cross-site scripting XSS attacks. This can be achieved through various parameters and endpoints, including the...

PT-2015-5047

Name of the Vulnerable Software and Affected Versions AdaptCMS version 3.0.3 Description The issue allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the HTTP Referer header. This is due to an open redirect vulnerability in the...

PT-2015-5046

Name of the Vulnerable Software and Affected Versions AdaptCMS version 3.0.3 Description The issue allows remote authenticated users to execute arbitrary PHP code by uploading a file with a PHP extension to the "admin/files/add" endpoint, and then accessing it via a direct request to the file in...

CVE-2015-1059: Improper Control of Generation of Code

Unrestricted file upload vulnerability in admin/files/add in AdaptCMS 3.0.3 allows remote authenticated users to execute arbitrary PHP code by uploading a file with a PHP extension, then accessing it via a direct request to the file in /app/webroot/uploads...

CVE-2015-1060: Undefined Security Weakness

Open redirect vulnerability in lib/Cake/Controller/Controller.php in AdaptCMS 3.0.3 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the HTTP Referer header...

CVE-2015-1058: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in AdaptCMS 3.0.3 allow remote attackers to inject arbitrary web script or HTML via the 1 dataCategorytitle parameter to admin/categories/add, 2 dataFieldtitle parameter to admin/fields/ajaxfields/, 3 name property in a basicInfo JSON object to...

AdaptCMS Arbitrary File Upload Vulnerability

AdaptCMS is a content management system. An arbitrary file upload vulnerability exists in AdaptCMS that could be exploited by an attacker to upload arbitrary files to an affected computer, which could result in the execution of arbitrary code within the context of the application...

AdaptCMS 'Referer' Header Field HTTP Open Redirect Vulnerability

AdaptCMS is a content management system. An open redirection vulnerability exists in AdaptCMS, which can be exploited by an attacker to construct a specially crafted URI and trick users into unknowingly being redirected to an attacker-controlled website...

Multiple HTML Injection Vulnerabilities in AdaptCMS

AdaptCMS is a content management system. AdaptCMS has multiple HTML injection vulnerabilities because it fails to properly filter user-supplied input. An attacker can execute supplied HTML and script code in the context of the affected site...