107 matches found
CVE-2012-1031
Unspecified vulnerability in EPiServer CMS 5 and 6 through 6R2, in certain configurations using Forms Authentication, allows remote authenticated users to obtain WebAdmins access by leveraging Edit Mode privileges, a different vulnerability than CVE-2011-3416 and CVE-2011-3417...
CVE-2012-1031
CVE-2012-1031 refers to an unspecified vulnerability in EPiServer CMS 5 and 6 up to 6R2 in certain configurations using Forms Authentication . The vulnerability allows remote authenticated users to obtain access to WebAdmins by leveraging Edit Mode privileges , and is noted as a different vulnera...
PT-2012-3030
Unspecified vulnerability in EPiServer CMS 5 and 6 through 6R2, in certain configurations using Forms Authentication, allows remote authenticated users to obtain WebAdmins access by leveraging Edit Mode privileges, a different vulnerability than CVE-2011-3416 and CVE-2011-3417...
CVE-2012-1031: Undefined Security Weakness
Unspecified vulnerability in EPiServer CMS 5 and 6 through 6R2, in certain configurations using Forms Authentication, allows remote authenticated users to obtain WebAdmins access by leveraging Edit Mode privileges, a different vulnerability than CVE-2011-3416 and CVE-2011-3417...
CVE-2012-1034: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in the admin interface in EPiServer CMS through 6R2 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...
PT-2012-3032
Name of the Vulnerable Software and Affected Versions EPiServer CMS versions prior to 7 Description The issue concerns multiple cross-site scripting XSS vulnerabilities in the admin interface. These vulnerabilities allow remote attackers to inject arbitrary web script or HTML via unspecified...
elektropost episerver 34 - Multiple Vulnerabilities
elektropost episerver 34 - Multiple Vulnerabilities source: https://www.securityfocus.com/bid/9223/info Multiple vulnerabilities were reported in EPIServer that include directory traversal, information disclosure, and denial of service. These issue result from insufficient sanitization of...