razorCMS HTML Injection Vulnerability

razorCMS is an open source content management system written in PHP, which stores all data in flat files, so there is no need to install a database. An HTML injection vulnerability exists in razorCMS version 3.4.7, which can be exploited by attackers to execute malicious code...

razorCMS Settings Component Cross-Site Scripting Vulnerability

razorCMS is an open source content management system written in PHP, which stores all data in flat files, so there is no need to install a database. A cross-site scripting vulnerability exists in the Settings component of razorCMS version 3.4.7, which can be exploited by a remote attacker to...

CVE-2018-16727

razorCMS 3.4.7 allows Stored XSS via the keywords of the homepage within the settings component...

CVE-2018-16727

razorCMS 3.4.7 allows Stored XSS via the keywords of the homepage within the settings component...

CVE-2018-16726

razorCMS 3.4.7 allows HTML injection via the description of the homepage within the settings component...

CVE-2018-16726

razorCMS 3.4.7 allows HTML injection via the description of the homepage within the settings component...

Cross site scripting

razorCMS 3.4.7 allows Stored XSS via the keywords of the homepage within the settings component...

Design/Logic Flaw

razorCMS 3.4.7 allows HTML injection via the description of the homepage within the settings component...

CVE-2018-16726

razorCMS 3.4.7 is affected by an HTML injection vulnerability: attackers can inject HTML via the homepage description in the Settings component. The issue is confirmed across multiple sources (NVD/CNVD) and is tied to the description field rather than a dedicated input validation path. The provid...

CVE-2018-16727

razorCMS 3.4.7 is affected by a Stored XSS in the Settings component via the homepage keywords parameter. The CNVD entry additionally notes that a remote attacker can execute arbitrary code in a user’s browser through this vector. No patch/version details or mitigations are provided in the connec...

CVE-2018-16726

razorCMS 3.4.7 allows HTML injection via the description of the homepage within the settings component...

CVE-2018-16727

razorCMS 3.4.7 allows Stored XSS via the keywords of the homepage within the settings component...

PT-2018-13704

Name of the Vulnerable Software and Affected Versions razorCMS version 3.4.7 Description The issue allows for Stored XSS via the keywords of the homepage within the settings component. Recommendations For razorCMS version 3.4.7, update to a version that fixes this issue, as using the current...

CVE-2018-16727: Improper Neutralization of Input During Web Page Generation

razorCMS 3.4.7 allows Stored XSS via the keywords of the homepage within the settings component...

CVE-2018-16726: Improper Neutralization of Input During Web Page Generation

razorCMS 3.4.7 allows HTML injection via the description of the homepage within the settings component...

razorCMS Cross-Site Scripting Vulnerability

razorCMS is a web content management system. A cross-site scripting vulnerability exists in razorCMS version 2.1, where an attacker can write arbitrary JavaScript code to trigger a cross-site scripting attack due to the lack of special character filtering on user input...

RazorCMS <= 1.2.1 STABLE CSRF (Delete Web Pages)

No description provided by source. +------------------------------------------------------------------------------------------------------------------------------------+ Exploit Title : RazorCMS = 1.2.1 STABLE CSRF Delete Web Pages Date : 08-03-2012 Author : Ivano Binetti...

razorCMS 1.2 Path Traversal Vulnerability

No description provided by source. Exploit Title: razorCMS 1.2 Path Traversal Google Dork: Powered by razorCMS Date: January 10, 2012 Author: chap0 Software Link: http://www.razorcms.co.uk/archive/core/ Version: 1.2 Tested on: Ubuntu Patch: Upgrade to latest release 1.2.1 Greetz To: Insert Name...

RazorCMS <= 1.2.1 STABLE File Upload Vulnerability

No description provided by source. Exploit Title: RazorCMS = 1.2.1 STABLE File Upload Vulnerability Google Dork: ? Date: 2012-02-26 Author: i2secHyo jun Oh Software Link: http://www.razorcms.co.uk/archive/core/razorCMScorev121STABLE.zip Version: RazorCMS 1.2.1 Tested on: Windows XP Upload a file...

razorCMS 0.3RC2 Multiple Vulnerabilities

No description provided by source. source: http://www.securityfocus.com/bid/34566/info razorCMS is prone to a local information-disclosure vulnerability, a local access-validation vulnerability, a security-bypass vulnerability, and multiple cross-site-scripting vulnerabilities. Attackers can...