CVE-2020-5297 Upload whitelisted files to any directory in OctoberCMS

In OctoberCMS october/october composer package versions from 1.0.319 and before 1.0.466, an attacker can exploit this vulnerability to upload jpg, jpeg, bmp, png, webp, gif, ico, css, js, woff, woff2, svg, ttf, eot, json, md, less, sass, scss, xml files to any directory of an October CMS server...

CVE-2020-5298 Reflected XSS when importing CSV in OctoberCMS

In OctoberCMS october/october composer package versions from 1.0.319 and before 1.0.466, a user with the ability to use the import functionality of the ImportExportController behavior can be socially engineered by an attacker to upload a maliciously crafted CSV file which could result in a...

CVE-2020-5298

In OctoberCMS october/october composer package versions from 1.0.319 and before 1.0.466, a user with the ability to use the import functionality of the ImportExportController behavior can be socially engineered by an attacker to upload a maliciously crafted CSV file which could result in a...

CVE-2020-5298

In OctoberCMS (composer package october/october), CVE-2020-5298 affects versions 1.0.319 and earlier than 1.0.466 where a user with access to the ImportExportController’s import flow can be socially engineered to upload a crafted CSV, enabling a reflected XSS on the user. The issue is mitigated b...

CVE-2020-5295

In OctoberCMS october/october composer package versions from 1.0.319 and before 1.0.466, an attacker can exploit this vulnerability to read local files of an October CMS server. The vulnerability is only exploitable by an authenticated backend user with the cms.manageassets permission. Issue has...

CVE-2020-5295

CVE-2020-5295 affects October CMS (october/october composer package) versions 1.0.319–1.0.465. An authenticated backend user with cms.manage_assets permission can read local files on the server. The issue has been fixed in Build 466 (v1.0.466).

CVE-2020-5295 Local File read vulnerability in OctoberCMS

In OctoberCMS october/october composer package versions from 1.0.319 and before 1.0.466, an attacker can exploit this vulnerability to read local files of an October CMS server. The vulnerability is only exploitable by an authenticated backend user with the cms.manageassets permission. Issue has...

PT-2020-18385

Name of the Vulnerable Software and Affected Versions OctoberCMS versions 1.0.319 through 1.0.465 Description An attacker can exploit this issue to delete arbitrary local files of an October CMS server. The issue is only exploitable by an authenticated backend user with the cms.manage assets...

CVE-2020-5299: Improper Neutralization of Special Elements used in a Command

In OctoberCMS october/october composer package versions from 1.0.319 and before 1.0.466, any users with the ability to modify any data that could eventually be exported as a CSV file from the ImportExportController could potentially introduce a CSV injection into the data to cause the generated C...

PT-2020-18387

Name of the Vulnerable Software and Affected Versions OctoberCMS versions 1.0.319 through 1.0.465 Description A user with the ability to use the import functionality of the ImportExportController behavior can be socially engineered by an attacker to upload a maliciously crafted CSV file, which...

PT-2020-18388

Name of the Vulnerable Software and Affected Versions OctoberCMS versions 1.0.319 through 1.0.465 Description The issue allows users with the ability to modify data that could be exported as a CSV file from the ImportExportController to potentially introduce a CSV injection, causing the generated...

PT-2020-18384

Name of the Vulnerable Software and Affected Versions OctoberCMS versions 1.0.319 through 1.0.465 Description An attacker can exploit this issue to read local files of an October CMS server. The issue is only exploitable by an authenticated backend user with the cms.manage assets permission...

PT-2020-18386

Name of the Vulnerable Software and Affected Versions OctoberCMS versions 1.0.319 through 1.0.465 Description An attacker can exploit this issue to upload various file types, including jpg, jpeg, bmp, png, webp, gif, ico, css, js, woff, woff2, svg, ttf, eot, json, md, less, sass, scss, and xml...

CVE-2020-5298: Improper Neutralization of Alternate XSS Syntax

In OctoberCMS october/october composer package versions from 1.0.319 and before 1.0.466, a user with the ability to use the import functionality of the ImportExportController behavior can be socially engineered by an attacker to upload a maliciously crafted CSV file which could result in a...

October CMS Cross-Site Scripting Vulnerability (CNVD-2017-37277)

OctoberCMS is a CMS system based on Laravel PHP development framework. A cross-site scripting vulnerability exists in the brand logo image name in October CMS build 412. An attacker can exploit this vulnerability to execute JavaScript code in the victim's browser...

October CMS PHP Object Injection Vulnerability

OctoberCMS is a CMS system based on Laravel PHP development framework. A PHP object injection vulnerability exists in the asset movement feature of October CMS build 412. An attacker can exploit the vulnerability to delete restricted files on the server...

October CMS PHP Code Execution Vulnerability

OctoberCMS is a CMS system based on Laravel PHP development framework. A PHP code execution vulnerability exists in the Asset Manager feature of October CMS build 412. An attacker can exploit this vulnerability to compromise a website and other applications on the server...

OctoberCMS 1.0.426 (Build 426) Cross Site Request Forgery

Exploit Title: OctoberCMS 1.0.426 - CSRF to Admin Account Takover Vendor Homepage: https://octobercms.com Software Link: https://octobercms.com/download Exploit Author: Zain Sabahat Website: https://about.me/ZainSabahat Category: webapps CVE: CVE-2017-16244 1. Description Cross-Site Request Forge...

Cross-site Request Forgery (CSRF) Bypass

OctoberCMS is vulnerable to cross-site request forgery CSRF. The library does not properly validate CSRF Tokens in the handler postback variable, allowing a malicious user to conduct a CSRF attack and authenticate as another user...

CVE-2017-16244

Cross-Site Request Forgery exists in OctoberCMS 1.0.426 aka Build 426 due to improper validation of CSRF tokens for postback handling, allowing an attacker to successfully take over the victim's account. The attack bypasses a protection mechanism involving X-CSRF headers and CSRF tokens via a...