c5scan

c5scan 유지 보수 중단됨 ====== Concrete5 CMS용 취약점 스캐너 및 정보 수집 도구입니다. 현재 다소 구식이며 리팩터링이 보류 중입니다. 사용법 python c5scan.py -u -r -u --url 대상 URL을 입력하세요 -r --robots 발견되면 robots.txt의 내용을 출력합니다 의존성 pip install httplib2 requests 예시 $ python c5scan.py -u localhost -r C5scan A vulnerability and information gatherer...

CVE-2021-40101

설문조사 XSS와 CSRF 결합으로 Concrete5 8.5.4에서 관리자 계정 탈취 발생 9 미만 버전의 Concrete CMS 관리자는 다른 사용자의 비밀번호를 변경할 때 자신의 비밀번호를 제공할 필요가 없었습니다. CVE-2021-28145 "Concrete CMS 이전 concrete5 8.5.5 이전 버전에서는 원격 인증 사용자가 조작된 설문조사 블록을 통해 XSS 공격을 수행할 수 있습니다. 이를 위해서는 최소한 편집자 권한이 필요합니다": 수정 사항은 버전 8.5.5에 포함되었습니다.와 결합하여 낮은 권한의 사용자...

Deserialization of Untrusted Data

Overview concrete5/concrete5 is a concrete5 open source CMS. Affected versions of this package are vulnerable to Deserialization of Untrusted Data via the unserialize process in Permission, Cache, and Search components. An attacker can execute arbitrary PHP code by supplying a crafted serialized...

Authorization Bypass Through User-Controlled Key

Overview concrete5/concrete5 is a concrete5 open source CMS. Affected versions of this package are vulnerable to Authorization Bypass Through User-Controlled Key in the Express association Reorder dialog due to insufficient authorization checks. An attacker can manipulate the order of entities...

Cross-site Request Forgery (CSRF)

Overview concrete5/concrete5 is a concrete5 open source CMS. Affected versions of this package are vulnerable to Cross-site Request Forgery CSRF via the concrete/controllers/dialog/express/association/reorder process. An attacker can perform unauthorized actions on behalf of an authenticated user...

Cross-site Request Forgery (CSRF)

Overview concrete5/concrete5 is a concrete5 open source CMS. Affected versions of this package are vulnerable to Cross-site Request Forgery CSRF via the addFavoriteFolder function in the backend file controller. An attacker can perform unauthorized actions on behalf of an authenticated user by...

Cross-site Request Forgery (CSRF)

Overview concrete5/concrete5 is a concrete5 open source CMS. Affected versions of this package are vulnerable to Cross-site Request Forgery CSRF via the concrete/controllers/dialog/page/bulk/delete process. An attacker can perform unauthorized actions on behalf of an authenticated user by trickin...

Cross-site Scripting (XSS)

Overview concrete5/concrete5 is a concrete5 open source CMS. Affected versions of this package are vulnerable to Cross-site Scripting XSS via the Concrete\Core\Legacy\Pagination process. An attacker can execute arbitrary scripts in the context of an authenticated admin or report viewer's session ...

Cross-site Request Forgery (CSRF)

Overview concrete5/concrete5 is a concrete5 open source CMS. Affected versions of this package are vulnerable to Cross-site Request Forgery CSRF via the star function in the backend file controller. An attacker can perform unauthorized actions on behalf of an authenticated user by tricking them...

Sensitive Cookie with Improper SameSite Attribute

Overview concrete5/concrete5 is a concrete5 open source CMS. Affected versions of this package are vulnerable to Sensitive Cookie with Improper SameSite Attribute via the concrete/controllers/dialog/page/bulk/design process. An attacker can perform unauthorized actions on behalf of an authenticat...

Cross-site Request Forgery (CSRF)

Overview concrete5/concrete5 is a concrete5 open source CMS. Affected versions of this package are vulnerable to Cross-site Request Forgery CSRF via the removeFavoriteFolder process. An attacker can perform unauthorized actions on behalf of an authenticated user by tricking them into submitting a...

Cross-site Request Forgery (CSRF)

Overview concrete5/concrete5 is a concrete5 open source CMS. Affected versions of this package are vulnerable to Cross-site Request Forgery CSRF via the concrete/controllers/dialog/event/duplicate process. An attacker can perform unauthorized actions on behalf of an authenticated user by tricking...

Cross-site Request Forgery (CSRF)

Overview concrete5/concrete5 is a concrete5 open source CMS. Affected versions of this package are vulnerable to Cross-site Request Forgery CSRF via the concrete/controllers/dialog/logs/bulk/delete process. An attacker can perform unauthorized actions on behalf of an authenticated user by trickin...

Cross-site Request Forgery (CSRF)

Overview concrete5/concrete5 is a concrete5 open source CMS. Affected versions of this package are vulnerable to Cross-site Request Forgery CSRF via the concrete/controllers/dialog/logs/delete process. An attacker can perform unauthorized actions on behalf of an authenticated user by tricking the...

Cross-site Request Forgery (CSRF)

Overview concrete5/concrete5 is a concrete5 open source CMS. Affected versions of this package are vulnerable to Cross-site Request Forgery CSRF via the rescan process in concrete/controllers/backend/file. An attacker can perform unauthorized actions on behalf of an authenticated user by tricking...

Missing Authorization

Overview concrete5/concrete5 is a concrete5 open source CMS. Affected versions of this package are vulnerable to Missing Authorization via the /ccm/system/dialogs/file/usage/fID endpoint. An attacker can access internal site structure data, including page IDs, versions, and URL paths, by sending ...

Missing Authorization

Overview concrete5/concrete5 is a concrete5 open source CMS. Affected versions of this package are vulnerable to Missing Authorization via the /ccm/frontend/conversations/getrating endpoint, which confirms existence and returns the rating score for any message by its identifier. An attacker can...

Server-side Request Forgery (SSRF)

Overview concrete5/concrete5 is a concrete5 open source CMS. Affected versions of this package are vulnerable to Server-side Request Forgery SSRF via the RSS Displayer process. An attacker can access internal resources by supplying a crafted feed URL that is fetched server-side without validation...

Cross-site Scripting (XSS)

Overview concrete5/concrete5 is a concrete5 open source CMS. Affected versions of this package are vulnerable to Cross-site Scripting XSS via the updateCollectionAliasExternal process. An attacker can execute arbitrary JavaScript code in the context of a user's browser by submitting crafted input...

Missing Authorization

Overview concrete5/concrete5 is a concrete5 open source CMS. Affected versions of this package are vulnerable to Missing Authorization in the submitpassword process. An attacker can gain unauthorized access to files by bypassing permission checks when downloading files, including those protected ...