836 matches found
CVE-2013-4793
CVE-2013-4793 affects the Umbraco CMS TemplateService component. The update function in umbraco.webservices/templates/templateService.cs (TemplateService) before version 6.0.4 does not require authentication, allowing remote attackers to execute arbitrary ASP.NET code via a crafted SOAP request. ...
CVE-2013-4793
The update function in umbraco.webservices/templates/templateService.cs in the TemplateService component in Umbraco CMS before 6.0.4 does not require authentication, which allows remote attackers to execute arbitrary ASP.NET code via a crafted SOAP request...
Umbraco CMS Remote Command Execution
No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3...
CVE-2013-0741
Cross-site scripting XSS vulnerability in imagegen.ashx in Percipient Studios ImageGen before 2.9.0 for Umbraco CMS allows remote attackers to inject arbitrary web script or HTML via the font parameter...
Cross site scripting
Cross-site scripting XSS vulnerability in imagegen.ashx in Percipient Studios ImageGen before 2.9.0 for Umbraco CMS allows remote attackers to inject arbitrary web script or HTML via the font parameter...
CVE-2013-0741
Cross-site scripting XSS vulnerability in imagegen.ashx in Percipient Studios ImageGen before 2.9.0 for Umbraco CMS allows remote attackers to inject arbitrary web script or HTML via the font parameter...
CVE-2013-0741
CVE-2013-0741 describes a cross-site scripting (XSS) vulnerability in Percipient Studios ImageGen for Umbraco CMS, exploitable via the imagegen.ashx handler. The flaw resides in the font parameter, allowing remote attackers to inject arbitrary web script or HTML. Affected product/version: Percipi...
Umbraco CMS 4.x Arbitrary aspx File Upload Vulnerability
Umbraco CMS version 4.x is vulnerable to a remote code execution vulnerability. An attacker can upload files via an unsecured web service located at /umbraco/webservices/codeEditorSave.asmx method SaveDLRScript. I created this exploit because in some audits the public exploit that juan vazquez...
Umbraco Detection
The remote host is running Umbraco, a web-based content management system written in ASP.NET. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid61516; scriptversion"1.5"; scriptsetattributeattribute:"pluginmodificationdate", value:"2022/06/01"; scriptnameenglish:"Umbrac...
Umbraco codeEditorSave.asmx SaveDLRScript Operation Traversal File Upload Arbitrary Command Execution
The version of Umbraco installed on the remote host allows unauthenticated remote attackers to upload arbitrary files using the 'SaveDLRScript' SOAP action of the 'codeEditorSave.asmx' script. In addition, these files can be stored in a web-accessible location using encoded traversal strings. The...
Umbraco CMS Remote Command Execution
Exploit for php platform in category web applications This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core'...
Umbraco CMS - Remote Command Execution (Metasploit)
This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3 'Umbraco CMS Remote Command Execution'...
Umbraco CMS Remote Command Execution
This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3 'Umbraco CMS Remote Command Execution'...
Umbraco CMS Remote Command Execution
This module can be used to execute a payload on Umbraco CMS 4.7.0.378. The payload is uploaded as an ASPX script by sending a specially crafted SOAP request to codeEditorSave.asmx, which permits unauthorized file upload via the SaveDLRScript operation. SaveDLRScript is also subject to a path...
[MATTA-2012-001] CVE-2012-1301; 0day; Open Proxy vulnerability in Umbraco 4.7
We don't release 0days... except when vendors show no interest in fixing their their bugs. http://umbraco.com/umbraco/dashboard/FeedProxy.aspx?url=http://en.wikipedia.org/wiki/Openproxy Have fun. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Matta Consulting - Matta Advisory...