CVE-2023-30145

Descripción: Se descubrió que Camaleon CMS v2.7.0 contiene una vulnerabilidad de inyección de plantillas del lado del servidor SSTI a través del parámetro formats. Componente afectado: Todas las versiones anteriores a 2.7.0 Versión corregida: Versiones corregidas: 2.7.4 Pasos para reproducir :...

CVE-2023-30145

Camaleon CMS v2.7.0 was discovered to contain a Server-Side Template Injection SSTI vulnerability via the formats parameter...

GHSA-X487-866M-P8HR Server-Side Template Injection in Camaleon CMS

Camaleon CMS prior to 2.7.4 was discovered to contain a Server-Side Template Injection SSTI vulnerability via the formats parameter...

Remote Code Execution (RCE)

Overview camaleoncms is a dynamic and advanced content management system based on Ruby on Rails as an alternative to Wordpress. Affected versions of this package are vulnerable to Remote Code Execution RCE via the formats parameter. Remediation Upgrade camaleoncms to version 2.7.4 or higher...

CVE-2023-30145

Camaleon CMS v2.7.0 was discovered to contain a Server-Side Template Injection SSTI vulnerability via the formats parameter...

Sql injection

Camaleon CMS v2.7.0 was discovered to contain a Server-Side Template Injection SSTI vulnerability via the formats parameter...

CVE-2023-30145

Camaleon CMS v2.7.0 was discovered to contain a Server-Side Template Injection SSTI vulnerability via the formats parameter...

CVE-2023-30145

Camaleon CMS is affected: versions below 2.7.0 contain a Server-Side Template Injection (SSTI) via the formats parameter in the admin media/upload flow. The root cause is SSTI in the template handling of the formats field, enabling potentially arbitrary code execution. Documented details include ...

CVE-2023-30145: Improper Control of Generation of Code

Camaleon CMS v2.7.0 was discovered to contain a Server-Side Template Injection SSTI vulnerability via the formats parameter...

CamaleonCMS 代码注入漏洞

CamaleonCMS is an advanced dynamic content management system CMS based on RubyonRails by the CamaleonCMS team. A security vulnerability exists in CamaleonCMS version v2.7.0, which stems from a server-side template injection SSTI via the formats parameter...

CVE-2023-30145

Camaleon CMS v2.7.0 was discovered to contain a Server-Side Template Injection SSTI vulnerability via the formats parameter...

PT-2023-22554 · Unknown · Camaleon Cms

Name of the Vulnerable Software and Affected Versions: Camaleon CMS versions 2.7.0 through 2.7.3 Description: The issue is related to a Server-Side Template Injection SSTI vulnerability. It occurs via the formats parameter. There is no information provided about the estimated number of potentiall...

CVE-2023-30145

Camaleon CMS v2.7.0 was discovered to contain a Server-Side Template Injection SSTI vulnerability via the formats parameter...

CVE-2023-30145

Camaleon CMS v2.7.0 was discovered to contain a Server-Side Template Injection SSTI vulnerability via the formats parameter...

Server-Side Template Injection in Camaleon CMS

Camaleon CMS prior to 2.7.4 was discovered to contain a Server-Side Template Injection SSTI vulnerability via the formats parameter...

Exploit for Code Injection in Tuzitio Camaleon_Cms

Description: Camaleon CMS v2.7.0 was discovered to contain a S...

Exploit for Code Injection in Tuzitio Camaleon_Cms

Description: Camaleon CMS v2.7.0 was discovered to contain a S...

CVE-2018-14689

An issue was discovered in Subsonic 6.1.1. The transcoding settings are affected by five stored cross-site scripting vulnerabilities in the namex, sourceformatsx, targetFormatx, step1x, and step2x parameters where x is an integer to transcodingSettings.view that could be used to steal session...