CVE-2016-6201

CVE-2016-6201 affects Ektron Content Management System (CMS) before 9.1.0.184 SP3. The flaw allows remote attackers to inject arbitrary web script/HTML via the ContType parameter in ViewContentByCategory under WorkArea/content.aspx, i.e., a cross-site scripting (XSS) vector. The vulnerability is ...

CVE-2016-6201

Cross-site scripting XSS vulnerability in Ektron Content Management System CMS before 9.1.0.184 SP3 9.1.0.184.3.127 allows remote attackers to inject arbitrary web script or HTML via the ContType parameter in a ViewContentByCategory action to WorkArea/content.aspx...

Ektron CMS 9.10SP1 Cross Site Scripting

Vulnerability type: Cross Site Scripting Vendor: Ektron Product: Ektron Content Management System Affected version: 9.10SP1Build 9.1.0.184 Patched version: 9.1.0.184SP39.1.0.184.3.127 Credit: Siyavash Ghasseminia, Edmund Goh CVE ID: CVE-2016-6133 PROOF OF CONCEPT Vulnerable URL:...