CVE-2018-12596

CVE-2018-12596 Ektron CMS 9.20 SP2 allows remote attackers to call aspx pages via the "activateuser.aspx" page, even if a page is located under the /WorkArea/ path, which is forbidden normally available exclusively for local admins. Exploit-DB publication at...

Ektron CMS - ekajaxtransform XSLT RCE Detection (CVE-2012-5357)

Detects CVE-2012-5357 by POSTing msxsl:script C XSLT that runs ipconfig.exe to ekajaxtransform.aspx. !/usr/bin/env python3 -- coding: utf-8 -- """Ektron CMS XSLT C script RCE CVE-2012-5357.""" import re from urllib.parse import quote from kittysploit import from lib.protocols.http.httpclient impo...

Ektron CMS Login Panel - Detect

Ektron CMS login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Ektron CMS login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Ektron CMS Login Panel - Detect', 'description':...

EUVD-2009-4440

Malware in sbrugna...

EUVD-2012-5279

Malware in sbrugna...

EUVD-2008-3485

Malware in sbrugna...

EUVD-2008-5101

Malware in sbrugna...

EUVD-2014-2757

Malware in sbrugna...

EUVD-2015-4447

Malware in sbrugna...

EUVD-2015-3666

Malware in sbrugna...

EUVD-2015-0939

Malware in sbrugna...

EUVD-2016-7067

Malware in sbrugna...

EUVD-2016-7134

Malware in sbrugna...

Ektron CMS400.NET Default Password Scanner

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Ektron CMS400.NET Default Password Scanner', 'Description' = %q Ektron CMS400.NET is a web content management system based on .NET. This module...

Ektron CMS 9 Database Disclosure

Exploit Title : Ektron CMS 9 Database Disclosure Exploit Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Date : 02/04/2019 Vendor Homepage : ektron.com episerver.com/products/platform/ektron/ Software Download Link :...

CVE-2018-12596

Episerver Ektron CMS before 9.0 SP3 Site CU 31, 9.1 before SP3 Site CU 45, or 9.2 before SP2 Site CU 22 allows remote attackers to call aspx pages via the "activateuser.aspx" page, even if a page is located under the /WorkArea/ path, which is forbidden normally available exclusively for local...

CVE-2018-12596

Episerver Ektron CMS before 9.0 SP3 Site CU 31, 9.1 before SP3 Site CU 45, or 9.2 before SP2 Site CU 22 allows remote attackers to call aspx pages via the "activateuser.aspx" page, even if a page is located under the /WorkArea/ path, which is forbidden normally available exclusively for local...

Design/Logic Flaw

Episerver Ektron CMS before 9.0 SP3 Site CU 31, 9.1 before SP3 Site CU 45, or 9.2 before SP2 Site CU 22 allows remote attackers to call aspx pages via the "activateuser.aspx" page, even if a page is located under the /WorkArea/ path, which is forbidden normally available exclusively for local...

CVE-2018-12596

Episerver Ektron CMS before 9.0 SP3 Site CU 31, 9.1 before SP3 Site CU 45, or 9.2 before SP2 Site CU 22 allows remote attackers to call aspx pages via the "activateuser.aspx" page, even if a page is located under the /WorkArea/ path, which is forbidden normally available exclusively for local...

CVE-2018-12596

CVE-2018-12596 affects Episerver/Ektron CMS (notably version 9.20 SP2) where remote attackers can reach the activateuser.aspx page, even when located under /WorkArea/ (normally restricted to local admins). The vulnerability is caused by improper access restrictions, permitting unauthorized enabli...