1018 matches found
CVE-2020-5810: Improper Neutralization of Input During Web Page Generation
A stored XSS vulnerability exists in Umbraco CMS = 8.9.1 or current. An authenticated user authorized to upload media can upload a malicious .svg file which act as a stored XSS payload...
PT-2020-18727
Name of the Vulnerable Software and Affected Versions Umbraco CMS versions prior to 8.9.2 Description A stored XSS issue exists, allowing an authenticated user with media upload permissions to upload a malicious .svg file that acts as a stored XSS payload. Recommendations For Umbraco CMS versions...
CVE-2020-29454
Editors/LogViewerController.cs in Umbraco through 8.9.1 allows a user to visit a logviewer endpoint even if they lack Applications.Settings access...
CVE-2020-29454
Editors/LogViewerController.cs in Umbraco through 8.9.1 allows a user to visit a logviewer endpoint even if they lack Applications.Settings access...
Use after free
Editors/LogViewerController.cs in Umbraco through 8.9.1 allows a user to visit a logviewer endpoint even if they lack Applications.Settings access...
CVE-2020-29454
Editors/LogViewerController.cs in Umbraco through 8.9.1 allows a user to visit a logviewer endpoint even if they lack Applications.Settings access...
CVE-2020-29454
Editors/LogViewerController.cs in Umbraco through 8.9.1 allows a user to visit a logviewer endpoint even if they lack Applications.Settings access...
CVE-2020-29454
CVE-2020-29454 affects Umbraco up to 8.9.1. Editors/LogViewerController.cs improperly enforces access, allowing a user without Applications.Settings to visit the logviewer endpoint. The connected sources confirm the vulnerable component and the access-control bypass but do not provide a concrete ...
PT-2020-17166
Name of the Vulnerable Software and Affected Versions Umbraco versions through 8.9.1 Description The issue allows a user to access a log viewer endpoint without having the necessary Applications.Settings access. This is due to a problem in the Editors/LogViewerController.cs file. Recommendations...
CVE-2020-29454: Incorrect Authorization
Editors/LogViewerController.cs in Umbraco through 8.9.1 allows a user to visit a logviewer endpoint even if they lack Applications.Settings access...
Umbraco Improper Access Control Vulnerability
Umbraco is an open source content management system CMS based on ASP.NET technology. An improper access control vulnerability exists in Editors/LogViewerController.cs in Umbraco 8.9.1 and earlier versions. Users without the Applications.Settings access privilege can exploit the vulnerability to...
Umbraco 安全漏洞
Umbraco is an open source content management system CMS based on ASP.NET technology. An improper access control vulnerability exists in Editors/LogViewerController.cs in Umbraco 8.9.1 and earlier versions. Users without the Applications.Settings access privilege can exploit the vulnerability to...
Umbraco CMS 7.12.4 Remote Code Execution
Exploit Title: Umbraco CMS - Authenticated Remote Code Execution Date: 2020-03-28 Exploit Author: Alexandre ZANNI noraj Based on: https://www.exploit-db.com/exploits/46153 Vendor Homepage: http://www.umbraco.com/ Software Link: https://our.umbraco.com/download/releases Version: 7.12.4 Category:...
Umbraco CMS 7.12.4 Remote Code Execution Exploit
Exploit for php platform in category web applications Exploit Title: Umbraco CMS - Authenticated Remote Code Execution Exploit Author: Alexandre ZANNI noraj Based on: https://www.exploit-db.com/exploits/46153 Vendor Homepage: http://www.umbraco.com/ Software Link:...
Umbraco Forms Code Issue Vulnerability
Umbraco Forms is a form builder. A security vulnerability exists in Umbraco Forms all versions. An attacker can exploit the vulnerability to upload arbitrary types of files...
Umbraco-RCE
Umbraco RCE exploit / PoC Umbraco CMS 7.12.4 - Authenticat...
Umbraco Cloud Code Issue Vulnerability
Umbraco is a Danish company Umbraco a set of C written in open source content management system CMS.Umbraco Cloud is the cloud version of Umbraco. A security vulnerability exists in Umbraco Cloud version 8.5.3. The vulnerability can be exploited by an attacker to upload files and execute code wit...
Umbraco Code Issue Vulnerability
Umbraco is a Danish company Umbraco C written in open source content management system CMS. A security vulnerability exists in Umbraco CMS version 8.5.3. The vulnerability can be exploited by an attacker to upload files and execute code via the Install Package feature...