189 matches found
OFCMS backend ueditor uploadScrawl file upload vulnerability
OFCMS is a content management system based on Java technology. A backend ueditor uploadScrawl file upload vulnerability exists in versions of OFCMS prior to 1.1.3. The vulnerability stems from the blocking of .jsp and .jspx files that fails to take into account the file.jsp::$DATA of the...
Code injection
An issue was discovered in OFCMS before 1.1.3. Remote attackers can execute arbitrary code because blocking of .jsp and .jspx files does not consider for example file.jsp::$DATA to the admin/ueditor/uploadVideo URI...
Baidu UEditor suffers from unauthorized access vulnerability
UEditor is a web editor developed by Baidu web front-end research and development department. An unauthorized access vulnerability exists in Baidu UEditor. An attacker can exploit the vulnerability to log in to the system without an account password and perform unauthorized operations...
CVE-2018-20528
JEECMS 9 has SSRF via the ueditor/getRemoteImage.jspx upfile parameter...
CVE-2018-20528
JEECMS 9 has SSRF via the ueditor/getRemoteImage.jspx upfile parameter...
Design/Logic Flaw
JEECMS 9 has SSRF via the ueditor/getRemoteImage.jspx upfile parameter...
CVE-2018-20528
The CVE-2018-20528 entry affects JEECMS 9 and describes a Server-Side Request Forgery (SSRF) via the ueditor/getRemoteImage.jspx upfile parameter. Connected records confirm the vulnerability is centered on JEECMS 9 and the SSRF condition in the upfile parameter, with an impact that includes Parti...
YUNUCMS Arbitrary File Deletion Vulnerability
YUNUCMS is China Yunyou YUNU network technology company of a set of open source enterprise station building content management system CMS. A security vulnerability exists in the statics/ueditor/php/vendor/Local.class.php file in YUNUCMS version 1.1.5. An attacker can exploit this vulnerability by...
UEditor SSRF漏洞(JSP版本)分析与复现
作者： 浮萍@猎户安全实验室 公众号：猎户安全实验室 前些时间测试的时候遇到了一个系统采用了UEditor编辑器，版本为1.4.3。已知该编辑器v1.4.3版本存在SSRF漏洞，虽然是Bool型的SSRF，除了可以进行内网探测外，也可以根据web应用指纹信息，之后进行进一步的测试。 0x01 前言 查看官方的更新日志可以发现UEditor编辑器在版本1.4.3.1修复了SSRF漏洞。...
Onethink Ueditor Server-Side Request Forgery Vulnerability
Onethink is a content management framework for web development based on ThinkPHP.Ueditor is one of the HTML editors. A server-side request forgery vulnerability exists in the getRemoteImage.php file of Ueditor in Onethink version 1.0 and 1.1. A remote attacker can exploit this vulnerability with...
CVE-2017-14323
SSRF Server Side Request Forgery in getRemoteImage.php in Ueditor in Onethink V1.0 and V1.1 allows remote attackers to obtain sensitive information, attack intranet hosts, or possibly trigger remote command execution via the upfile parameter...
CVE-2017-14323
SSRF Server Side Request Forgery in getRemoteImage.php in Ueditor in Onethink V1.0 and V1.1 allows remote attackers to obtain sensitive information, attack intranet hosts, or possibly trigger remote command execution via the upfile parameter...
Server side request forgery (ssrf)
SSRF Server Side Request Forgery in getRemoteImage.php in Ueditor in Onethink V1.0 and V1.1 allows remote attackers to obtain sensitive information, attack intranet hosts, or possibly trigger remote command execution via the upfile parameter...
CVE-2017-14323
SSRF Server Side Request Forgery in getRemoteImage.php in Ueditor in Onethink V1.0 and V1.1 allows remote attackers to obtain sensitive information, attack intranet hosts, or possibly trigger remote command execution via the upfile parameter...
CVE-2017-14323
CVE-2017-14323 describes a Server-Side Request Forgery (SSRF) in Onethink’s Ueditor component, specifically in getRemoteImage.php used by Onethink V1.0 and V1.1. An attacker can use the upfile parameter to fetch or reach internal network resources and, per sources, potentially trigger remote comm...
Onethink CMS Server Side Request Forgery Vulnerability
Onethink CMS versions released up to date 2018/04/06 suffer from a server-side request forgery vulnerability. SSRFPS"Server Side Request ForgeryPSc in Onethink All version CVE-2017-14323 The Onethink is an open source CMSContent Management System.This system is based on the Thinkphp3.2 developmen...
Baidu UEditor Cross-Site Scripting Vulnerability
Baidu UEditor is China's Baidu Baidu company's set of open source HTML editor . A cross-site scripting vulnerability exists in Baidu UEditor version 1.4.3.3. A remote attacker can leverage the SRC attribute of the IFRAME element to inject arbitrary web script or HTML...
CVE-2017-14744
UEditor 1.4.3.3 has XSS via the SRC attribute of an IFRAME element...