EUVD-2017-7090

Malware in sbrugna...

CVE-2017-15639

tasks/feed/readRSS.cfm in Mura CMS before 6.2 allows attackers to bypass intended access restrictions by leveraging the "draggable feeds" feature...

CVE-2017-15639

tasks/feed/readRSS.cfm in Mura CMS before 6.2 allows attackers to bypass intended access restrictions by leveraging the "draggable feeds" feature...

Design/Logic Flaw

tasks/feed/readRSS.cfm in Mura CMS before 6.2 allows attackers to bypass intended access restrictions by leveraging the "draggable feeds" feature...

CVE-2017-15639

CVE-2017-15639 affects Mura CMS before 6.2. The readRSS.cfm file can be abused to bypass access restrictions via the draggable feeds feature. Exploitation details are documented (e.g., SSRF/XXE vectors) and public exploit references exist. The remedy is to upgrade to Mura CMS 6.2 or later or appl...

CVE-2017-15639

tasks/feed/readRSS.cfm in Mura CMS before 6.2 allows attackers to bypass intended access restrictions by leveraging the "draggable feeds" feature...

PT-2017-14133

Name of the Vulnerable Software and Affected Versions Mura CMS versions prior to 6.2 Description The issue allows attackers to bypass intended access restrictions by leveraging the "draggable feeds" feature in the tasks/feed/readRSS.cfm file. Recommendations For versions prior to 6.2, update to...

CVE-2017-15639: Improper Restriction of XML External Entity Reference

tasks/feed/readRSS.cfm in Mura CMS before 6.2 allows attackers to bypass intended access restrictions by leveraging the "draggable feeds" feature...