CVE-2019-12734

SiteVision 4 has Incorrect Access Control...

CVE-2019-12734

SiteVision 4.x/5.x suffers from Insufficient Module Access Control (CVE-2019-12734). A low-privilege user (e.g., Editor) can inject or edit script modules during page edits, enabling Cross‑Site Scripting and in some descriptions Remote Code Execution. Affected versions: SiteVision 4 up to 4.5.6 a...

CVE-2019-12733

SiteVision 4 allows Remote Code Execution...

CVE-2019-12733

SiteVision 4.x (up to 4.5.6) and SiteVision 5.x (up to 5.1.1) are affected by CVE-2019-12733. The issue arises from insufficient validation of whether a user is permitted to add or edit modules of type “script,” enabling a low-privilege user (e.g., Editor) to inject or modify a script module and ...

SiteVision 4.x / 5.x Insufficient Module Access Control

SiteVision Insufficient Module Access Control CVE-2019-12734 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-12734 https://www.cybercom.com/About-Cybercom/Blogs/Security-Advisories/high-risk-vulnerabilities-in-cms-product/ Summary Attackers may inject non-authorised modules when editing...

SiteVision 4.x / 5.x Remote Code Execution

SiteVision Remote Code Execution CVE-2019-12733 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-12733 https://www.cybercom.com/About-Cybercom/Blogs/Security-Advisories/high-risk-vulnerabilities-in-cms-product/ Summary Attackers may execute arbitrary code as root on the target server after...