2 matches found
Code injection
Kentico 9.0 before 9.0.51 and 10.0 before 10.0.48 allows remote attackers to obtain Global Administrator access by visiting CMSInstall/install.aspx and then navigating to the CMS Administration Dashboard...
7.5CVSS9.3AI score0.68457EPSS
SaveExploits1References1Affected Software1
CVE-2017-17736: Direct Request
Kentico 9.0 before 9.0.51 and 10.0 before 10.0.48 allows remote attackers to obtain Global Administrator access by visiting CMSInstall/install.aspx and then navigating to the CMS Administration Dashboard...
9.8CVSS8.2AI score0.68457EPSS
SaveExploits1References2
20