CVE-2024-48652

CVE-2024-48652 camaleon-cms v.2.7.5의 사이트 간 스크립팅Cross Site Scripting 취약점으로 인해 원격 공격자가 콘텐츠 그룹 이름 필드를 통해 임의 코드를 실행할 수 있습니다. 재현 단계: 1.URL을 엽니다: http://127.0.0.1/admin/dashboard 2.관리자 자격 증명으로 로그인합니다. 3."Settings" 섹션으로 이동합니다. 4."Content Groups"를 클릭합니다. 5.콘텐츠 그룹에 대해 "Edit" 옵션을 선택합니다. 6."Name" 필드에 다음 XSS...

camaleon_cms affected by cross site scripting

Cross Site Scripting vulnerability in camaleon-cms v.2.7.5 allows remote attacker to execute arbitrary code via the content group name field...

CVE-2024-48652

Cross Site Scripting vulnerability in camaleon-cms v.2.7.5 allows remote attacker to execute arbitrary code via the content group name field...

CamaleonCMS 跨站脚本漏洞

CamaleonCMS is an advanced RubyonRails-based dynamic content management system CMS from the CamaleonCMS team. A security vulnerability exists in CamaleonCMS version v2.7.5, which stems from the presence of a cross-site scripting vulnerability that allows remote attackers to execute arbitrary code...

PT-2024-33173 · Unknown · Camaleon Cms

Name of the Vulnerable Software and Affected Versions: camaleon-cms version 2.7.5 Description: A Cross Site Scripting issue allows a remote attacker to execute arbitrary code via the content group name field. Recommendations: For camaleon-cms version 2.7.5, update to a version that fixes this iss...