834 matches found
Umbraco CMS SeoChecker Plugin 1.9.2 - Cross-Site Scripting Vulnerability
Exploit for php platform in category web applications Author Information Author : Ahmed Elhady Mohamed twitter : @AhmedELhady Date : 01/07/2018 Software Information Affected Software : SeoChecker Umbraco CMS Plug-in Version: version 1.9.2 Software website : https://soetemansoftware.nl/seo-checker...
Umbraco CMS SeoChecker Plugin 1.9.2 - Cross-Site Scripting
Author Information Author : Ahmed Elhady Mohamed twitter : @AhmedELhady Date : 01/07/2018 Software Information Affected Software : SeoChecker Umbraco CMS Plug-in Version: version 1.9.2 Software website : https://soetemansoftware.nl/seo-checker Description SeoChecker Umbraco CMS Plug-in version...
SeoChecker 1.9.2 Cross Site Scripting
Author Information Author : Ahmed Elhady Mohamed twitter : @AhmedELhady Date : 01/07/2018 Software Information Affected Software : SeoChecker Umbraco CMS Plug-in Version: version 1.9.2 Software website : https://soetemansoftware.nl/seo-checker Description SeoChecker Umbraco CMS Plug-in version...
CVE-2012-10054
creationtimestamp| type| source ---|---|--- 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/http/umbracouploadaspx.rb 2025-10-23 21:12:56+00:00| seen| MISP/a9d21043-f825-4bac-8d2b-56fb9e8343e7...
CVE-2017-15279
Cross-site scripting XSS vulnerability in Umbraco CMS before 7.7.3 allows remote attackers to inject arbitrary web script or HTML via the "page name" aka nodename parameter during the creation of a new page, related to Umbraco.Web.UI/umbraco/dialogs/Publish.aspx.cs and...
CVE-2017-15280
XML external entity XXE vulnerability in Umbraco CMS before 7.7.3 allows attackers to obtain sensitive information by reading files on the server or sending TCP requests to intranet hosts aka SSRF, related to Umbraco.Web/umbraco.presentation/umbraco/dialogs/importDocumenttype.aspx.cs...
CVE-2017-15279
Cross-site scripting XSS vulnerability in Umbraco CMS before 7.7.3 allows remote attackers to inject arbitrary web script or HTML via the "page name" aka nodename parameter during the creation of a new page, related to Umbraco.Web.UI/umbraco/dialogs/Publish.aspx.cs and...
CVE-2017-15280
XML external entity XXE vulnerability in Umbraco CMS before 7.7.3 allows attackers to obtain sensitive information by reading files on the server or sending TCP requests to intranet hosts aka SSRF, related to Umbraco.Web/umbraco.presentation/umbraco/dialogs/importDocumenttype.aspx.cs...
Xxe
XML external entity XXE vulnerability in Umbraco CMS before 7.7.3 allows attackers to obtain sensitive information by reading files on the server or sending TCP requests to intranet hosts aka SSRF, related to Umbraco.Web/umbraco.presentation/umbraco/dialogs/importDocumenttype.aspx.cs...
Cross site scripting
Cross-site scripting XSS vulnerability in Umbraco CMS before 7.7.3 allows remote attackers to inject arbitrary web script or HTML via the "page name" aka nodename parameter during the creation of a new page, related to Umbraco.Web.UI/umbraco/dialogs/Publish.aspx.cs and...
CVE-2017-15279
Umbraco CMS prior to 7.7.3 contains an XSS vulnerability exploitable via the PageName/nodename parameter during new page creation. The issue arises from improper input sanitization, allowing an attacker’s script/HTML to be stored and subsequently served to users. Reported across multiple sources ...
CVE-2017-15280
XML external entity XXE vulnerability in Umbraco CMS before 7.7.3 allows attackers to obtain sensitive information by reading files on the server or sending TCP requests to intranet hosts aka SSRF, related to Umbraco.Web/umbraco.presentation/umbraco/dialogs/importDocumenttype.aspx.cs...
CVE-2017-15280
The CVE-2017-15280 entry applies to Umbraco CMS and describes an XML External Entity (XXE) vulnerability affecting earlier Umbraco versions (notably before 7.7.3). The underlying issue is XXE in the XML parsing path related to Umbraco.Web/umbraco.presentation/umbraco/dialogs/importDocumenttype.as...
CVE-2017-15279
Cross-site scripting XSS vulnerability in Umbraco CMS before 7.7.3 allows remote attackers to inject arbitrary web script or HTML via the "page name" aka nodename parameter during the creation of a new page, related to Umbraco.Web.UI/umbraco/dialogs/Publish.aspx.cs and...
Umbraco CMS Cross-Site Scripting Vulnerability (CNVD-2017-30256)
Umbraco is the leading open source Microsoft ASP.NET CMS. A cross-site scripting vulnerability exists in Umbraco CMS, which allows remote attackers to inject arbitrary web script or HTML via the "page name" parameter during the creation of a new page...
Umbraco CMS XML External Entity Vulnerability
Umbraco is the leading open source Microsoft ASP.NET CMS. An XML external entity vulnerability exists in Umbraco CMS, which could allow an attacker to obtain sensitive information by reading files on the server or sending TCP requests to an intranet host...
CVE-2012-1301
The FeedProxy.aspx script in Umbraco 4.7.0 allows remote attackers to proxy requests on their behalf via the "url" parameter...
Design/Logic Flaw
The FeedProxy.aspx script in Umbraco 4.7.0 allows remote attackers to proxy requests on their behalf via the "url" parameter...
CVE-2012-1301
The CVE-2012-1301 vulnerability affects Umbraco 4.7.0 where the FeedProxy.aspx script can be abused to proxy arbitrary requests via the url parameter, enabling an open-proxy condition. The root cause is improper handling of the url parameter in FeedProxy.aspx, allowing unauthenticated remote use ...