Unspecified Vulnerability in Inedo BuildMaster

Inedo BuildMaster is a suite of automated deployment software from Inedo Japan. The software integrates a variety of tools to automate the deployment of application suites. A security vulnerability exists in versions of Inedo BuildMaster prior to 5.8.2, which stems from the program using...

CVE-2017-16521

In Inedo BuildMaster before 5.8.2, XslTransform was used where XslCompiledTransform should have been used...

CVE-2017-16521

In Inedo BuildMaster before 5.8.2, XslTransform was used where XslCompiledTransform should have been used...

Design/Logic Flaw

In Inedo BuildMaster before 5.8.2, XslTransform was used where XslCompiledTransform should have been used...

CVE-2017-16521

In Inedo BuildMaster before 5.8.2, XslTransform was used where XslCompiledTransform should have been used...

CVE-2017-16521

Inedo BuildMaster prior to 5.8.2 uses XslTransform where XslCompiledTransform should have been used. Affects Inedo BuildMaster versions before 5.8.2; root cause is the use of a non-compiled XSLT path. The CVE details from multiple sources (NVD/NVD CVE-2017-16521) indicate high severity, with reme...

PT-2017-14438

Name of the Vulnerable Software and Affected Versions BuildMaster versions prior to 5.8.2 Description The issue arises from the use of XslTransform instead of XslCompiledTransform in Inedo BuildMaster. Recommendations For versions prior to 5.8.2, update to version 5.8.2 or later to resolve the...

Design/Logic Flaw

Ektron Content Management System CMS before 8.02 SP5 uses the XslCompiledTransform class with enablescript set to true, which allows remote attackers to execute arbitrary code with NETWORK SERVICE privileges via crafted XSL data...

CVE-2012-5357

Ektron Content Management System CMS before 8.02 SP5 uses the XslCompiledTransform class with enablescript set to true, which allows remote attackers to execute arbitrary code with NETWORK SERVICE privileges via crafted XSL data...

CVE-2012-5357

CVE-2012-5357 affects Ektron CMS prior to 8.02 SP5. The vulnerability arises from XslCompiledTransform with enablescript set to true, allowing remote code execution with NETWORK SERVICE privileges via crafted XSL data. Documentation and third-party sources confirm RCE potential in Ektron’s XSLT h...

PT-2017-5207

Name of the Vulnerable Software and Affected Versions: Ektron Content Management System CMS versions prior to 8.02 SP5 Description: The issue allows remote attackers to execute arbitrary code with NETWORK SERVICE privileges via crafted XSL data, due to the use of the XslCompiledTransform class wi...

CVE-2012-5357: Undefined Security Weakness

Ektron Content Management System CMS before 8.02 SP5 uses the XslCompiledTransform class with enablescript set to true, which allows remote attackers to execute arbitrary code with NETWORK SERVICE privileges via crafted XSL data...

Ektron XSLT Transform Remote Code Execution (CVE-2012-5357)

A remote code execution vulnerability has been reported in Ektron CMS in XslCompiledTransform class...

Ektron CMS XslCompiledTransform Class Request Parsing Remote Code Execution

The version of Ektron CMS hosted on the remote web server is affected by a remote code execution vulnerability. The vulnerability arises because the 'ekajaxtransform.aspx' script utilizes the .NET 'XslCompiledTransform' class with 'enablescript' set to true. Nessus was able to execute this...