534 matches found
CVE-2017-1000193: Improper Neutralization of Input During Web Page Generation
October CMS build 412 is vulnerable to stored WCI a.k.a XSS in brand logo image name resulting in JavaScript code execution in the victim's browser...
PT-2017-10890
Name of the Vulnerable Software and Affected Versions October CMS build 412 Description The issue allows for stored XSS in the brand logo image name, resulting in JavaScript code execution in the victim's browser. This occurs because the brand logo image name is not properly sanitized, enabling a...
PT-2017-10891
Name of the Vulnerable Software and Affected Versions October CMS build 412 Description The issue allows for Apache configuration modification via file upload functionality, which can result in site compromise and potentially affect other applications on the server. Recommendations For October CM...
PT-2017-10893
Name of the Vulnerable Software and Affected Versions October CMS build 412 Description The issue allows for PHP code execution in the asset manager functionality, which can result in site compromise and potentially affect other applications on the server. Recommendations For October CMS build 41...
PT-2017-10892
Name of the Vulnerable Software and Affected Versions October CMS build 412 Description The issue allows for PHP object injection in the asset move functionality, which can result in the ability to delete files, limited by file permissions on the server. Recommendations For October CMS build 412,...
October CMS File Path Modification Vulnerability
OctoberCMS is a CMS system based on Laravel PHP development framework. A file path modification vulnerability exists in the asset movement feature of October CMS build 412. An attacker can exploit this vulnerability to create malicious files on the server...
October CMS Apache Configuration Modification Vulnerability
OctoberCMS is a CMS system based on Laravel PHP development framework. October CMS build 412 suffers from an Apache configuration modification vulnerability. The vulnerability can be exploited to compromise a website and other applications on the server via the file upload feature...
PT-2017-10894
Name of the Vulnerable Software and Affected Versions October CMS build 412 Description The issue allows for file path modification in the asset move functionality, potentially resulting in the creation of malicious files on the server. Recommendations For October CMS build 412, update to a versi...
October CMS Cross-Site Scripting Vulnerability
October CMS is an open source, self-hosted content management system CMS built on the Laravel PHP framework developed by Canadian software developer Alexey Bobkov and Australian software developer Samuel Georges. A cross-site scripting vulnerability exists in October CMS build 271 and earlier...
October CMS Arbitrary File Upload Vulnerability
October CMS is a content management program. A security vulnerability exists in October CMS file uploads, which allows remote attackers to exploit the vulnerability to submit specially crafted files to execute arbitrary code in the context of the application...
CVE-2017-1000119
October CMS build 412 is vulnerable to PHP code execution in the file upload functionality resulting in site compromise and possibly other applications on the server...
CVE-2017-1000119
October CMS build 412 is vulnerable to PHP code execution in the file upload functionality resulting in site compromise and possibly other applications on the server...
Unrestricted file upload
October CMS build 412 is vulnerable to PHP code execution in the file upload functionality resulting in site compromise and possibly other applications on the server...
CVE-2017-1000119: Unrestricted Upload of File with Dangerous Type
October CMS build 412 is vulnerable to PHP code execution in the file upload functionality resulting in site compromise and possibly other applications on the server...
CVE-2017-1000119
October CMS build 412 is vulnerable to PHP code execution in the file upload functionality resulting in site compromise and possibly other applications on the server...
CVE-2017-1000119
October CMS build 412 is vulnerable to PHP code execution via the file upload functionality, potentially allowing site compromise and server-wide impact. The vulnerability is documented across multiple sources (NVD entry CVE-2017-1000119; GitHub/OSV/OSVDB advisories; Metasploit module and exploit...
CVE-2017-1000119
October CMS build 412 is vulnerable to PHP code execution in the file upload functionality resulting in site compromise and possibly other applications on the server...
PT-2017-10822
Name of the Vulnerable Software and Affected Versions October CMS build 412 Description The issue allows for PHP code execution in the file upload functionality, which can result in site compromise and potentially affect other applications on the server. Recommendations For October CMS build 412,...
Cross site scripting
Cross-site scripting XSS vulnerability in October CMS build 271 and earlier allows remote attackers to inject arbitrary web script or HTML via vectors involving a file title, a different vulnerability than CVE-2015-5612...
CVE-2015-5613
Cross-site scripting XSS vulnerability in October CMS build 271 and earlier allows remote attackers to inject arbitrary web script or HTML via vectors involving a file title, a different vulnerability than CVE-2015-5612...