31 matches found
Remote code execution
SiteVision 4 allows Remote Code Execution...
Improper access control
SiteVision 4 has Incorrect Access Control...
CVE-2019-12734
SiteVision 4 has Incorrect Access Control...
CVE-2019-12734
SiteVision 4.x/5.x suffers from Insufficient Module Access Control (CVE-2019-12734). A low-privilege user (e.g., Editor) can inject or edit script modules during page edits, enabling Cross‑Site Scripting and in some descriptions Remote Code Execution. Affected versions: SiteVision 4 up to 4.5.6 a...
CVE-2019-12733
SiteVision 4 allows Remote Code Execution...
CVE-2019-12733
SiteVision 4.x (up to 4.5.6) and SiteVision 5.x (up to 5.1.1) are affected by CVE-2019-12733. The issue arises from insufficient validation of whether a user is permitted to add or edit modules of type “script,” enabling a low-privilege user (e.g., Editor) to inject or modify a script module and ...
PT-2019-12906
Name of the Vulnerable Software and Affected Versions SiteVision versions 4.x through 5.x Description The issue allows for Remote Code Execution. There is an exploit available for this issue. Recommendations For SiteVision versions 4.x through 5.x, at the moment, there is no information about a...
SiteVision 4.x / 5.x Remote Code Execution
SiteVision Remote Code Execution CVE-2019-12733 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-12733 https://www.cybercom.com/About-Cybercom/Blogs/Security-Advisories/high-risk-vulnerabilities-in-cms-product/ Summary Attackers may execute arbitrary code as root on the target server after...
SiteVision 4.x / 5.x Insufficient Module Access Control
SiteVision Insufficient Module Access Control CVE-2019-12734 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-12734 https://www.cybercom.com/About-Cybercom/Blogs/Security-Advisories/high-risk-vulnerabilities-in-cms-product/ Summary Attackers may inject non-authorised modules when editing...
