CVE-2009-1459: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in razorCMS before 0.4 allows remote attackers to hijack the authentication of administrators for requests that create a web page containing PHP code...

CVE-2009-1461: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Create New Page form in razorCMS 0.3 RC2 and earlier allows remote authenticated users to inject arbitrary web script or HTML via the Page Title field...

CVE-2009-1460: Undefined Security Weakness

razorCMS before 0.4 uses weak permissions for 1 admin/core/adminconfig.php, which allows local users to obtain the administrator's password hash and FTP user credentials; and 2 the root directory, 3 datastore/, and 4 admin/core/, which allows local users to have an unspecified impact...

Razor CMS 0.3RC2 XSS / Disclosure / Execution

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Multiple Vulnerability Disclosure for razorCMS - ---------------------------------------------- A recent security audit has uncovered multiple security vulnerabilities in the latest version 0.3RC2 and all previous versions of razorCMS CORE by Morgan...

RazorCMS 0.3RC2 - Multiple Vulnerabilities

RazorCMS 0.3RC2 - Multiple Vulnerabilities source: https://www.securityfocus.com/bid/34566/info razorCMS is prone to a local information-disclosure vulnerability, a local access-validation vulnerability, a security-bypass vulnerability, and multiple cross-site-scripting vulnerabilities. Attackers...

RazorCMS 0.3RC2 - Multiple Vulnerabilities

source: https://www.securityfocus.com/bid/34566/info razorCMS is prone to a local information-disclosure vulnerability, a local access-validation vulnerability, a security-bypass vulnerability, and multiple cross-site-scripting vulnerabilities. Attackers can exploit these issues to gain access to...