CVE-2021-34992

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Orckestra C1 CMS 6.10. Authentication is required to exploit this vulnerability. The specific flaw exists within Composite.dll. The issue results from the lack of proper validation of user-supplied...

CVE-2021-34992

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Orckestra C1 CMS 6.10. Authentication is required to exploit this vulnerability. The specific flaw exists within Composite.dll. The issue results from the lack of proper validation of user-supplied...

CVE-2021-34992

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Orckestra C1 CMS 6.10. Authentication is required to exploit this vulnerability. The specific flaw exists within Composite.dll. The issue results from the lack of proper validation of user-supplied...

Deserialization of untrusted data

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Orckestra C1 CMS 6.10. Authentication is required to exploit this vulnerability. The specific flaw exists within Composite.dll. The issue results from the lack of proper validation of user-supplied...

CVE-2021-34992

CVE-2021-34992 affects Orckestra C1 CMS 6.10 with the vulnerability in Composite.dll where improper validation leads to deserialization of untrusted data and remote code execution in the service account context. Exploitation requires authentication; ZDI-14740 is cited. Red Hat/NVD/OSV references ...

Orckestra C1 CMS Composite Deserialization of Untrusted Data Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Orckestra C1 CMS. Authentication is required to exploit this vulnerability. The specific flaw exists within Composite.dll. The issue results from the lack of proper validation of user-supplied data,...

Orckestra C1 CMS Code Execution Vulnerability

Orckestra C1 CMS is an open source web content management system CMS based on . A security vulnerability exists in the EntityTokenSerializer class of the Composite.dll file in Orckestra C1 CMS 6.6 and earlier versions. An attacker can exploit the vulnerability to execute code...