[SECURITY] Stored Cross Site Scripting in Ektron CMS 8.7

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Stored Cross Site Scripting in Ektron CMS 8.7 CVE reference: CVE-2014-2729 Affected platforms: Ektron Web Content Management System Version: 8.7.0 Date: 2013-December-19 Security risk: Medium CVSS - AV:N/AC:L/Au:S/C:P/I:P/A:N Researcher: Joseph Zeng...

CVE-2014-2729

Cross-site scripting XSS vulnerability in content.aspx in Ektron CMS 8.7 before 8.7.0.055 allows remote authenticated users to inject arbitrary web script or HTML via the category0 parameter, which is not properly handled when displaying the Subjects tab in the View Properties menu option...

Cross site scripting

Cross-site scripting XSS vulnerability in content.aspx in Ektron CMS 8.7 before 8.7.0.055 allows remote authenticated users to inject arbitrary web script or HTML via the category0 parameter, which is not properly handled when displaying the Subjects tab in the View Properties menu option...

CVE-2014-2729

Cross-site scripting XSS vulnerability in content.aspx in Ektron CMS 8.7 before 8.7.0.055 allows remote authenticated users to inject arbitrary web script or HTML via the category0 parameter, which is not properly handled when displaying the Subjects tab in the View Properties menu option...

CVE-2014-2729

This CVE targets Ektron CMS 8.7 (before 8.7.0.055). A stored XSS flaw exists in the content.aspx page where the category0 parameter is not properly sanitized when displaying the Subjects tab in the View Properties menu. It affects authenticated remote users who can inject arbitrary script/HTML vi...

Ektron CMS多个HTML注入漏洞

Bugtraq ID:66940 CVE ID:CVE-2014-2729 Ektron CMS是一款内容管理系统。 Ektron CMS不正确处理'category0'参数数据，允许远程攻击者利用漏洞注入恶意脚本或HTML代码，当恶意数据被查看时，可获取敏感信息或劫持用户会话。 0 Ektron CMS 8.7 Ektron CMS 8.7.0.055.2.015版本已修复该漏洞，建议用户下载使用： http://www.ektron.com...

Ektron CMS 8.7 Cross Site Scripting

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Stored Cross Site Scripting in Ektron CMS 8.7 CVE reference: CVE-2014-2729 Affected platforms: Ektron Web Content Management System Version: 8.7.0 Date: 2013-December-19 Security risk: Medium CVSS - AV:N/AC:L/Au:S/C:P/I:P/A:N Researcher: Joseph Zeng...

Ektron CMS用户枚举和开放重定向漏洞

Ektron CMS是一款内容管理系统。 1.由于部分输入在用于重定向时缺少校验，允许攻击者构建恶意URI，诱使用户解析，可重定向用户通信。 2.由于登录功能返回错误消息存在错误，允许攻击者利用漏洞判断错误信息来枚举合法用户名。 0 Ektron CMS 9.x Ektron CMS 9.00 SP2版本已修复该漏洞，建议用户下载使用： http://www.ektron.com/...

Ektron CMS SQL注入漏洞

Ektron CMS是一款内容管理系统。 由于关于Ektron Search API的输入在用于SQL查询时缺少过滤，可导致SQL注入攻击。 0 Ektron CMS 8.x Ektron CMS 9.00版本已修复该漏洞，建议用户下载使用： http://www.ektron.com/...

Ektron CMS Take Over - Hijacking Accounts

I have detailed a vulnerability within Ektron CMS that allows an unauthenticated user to hijack any account. The clear targets of choice for this CMS would be the builtin or admin account. Whilst I found this issue back in 2012, it appears that around 65 are still vulnerable and should be patchin...

Ektron 8.02 /WorkArea/ContentDesigner/ekajaxtransform.aspx 代码执行漏洞

No description provided by source...

Ektron XSLT Transform Remote Code Execution (CVE-2012-5357)

A remote code execution vulnerability has been reported in Ektron CMS in XslCompiledTransform class...

Ektron CMS XslCompiledTransform Class Request Parsing Remote Code Execution

The version of Ektron CMS hosted on the remote web server is affected by a remote code execution vulnerability. The vulnerability arises because the 'ekajaxtransform.aspx' script utilizes the .NET 'XslCompiledTransform' class with 'enablescript' set to true. Nessus was able to execute this...

Ektron CMS < 8.02 Service Pack 5 RCE Vulnerability - Active Check

Ektron CMS is prone to a remote code execution RCE ulnerability. Copyright C 2012 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free...

Ektron 8.02 - XSLT Transform Remote Code Execution (Metasploit)

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' require 'msf/core/exploit/filedropper' class Metasploit3...

Ektron 8.02 XSLT Transform Remote Code Execution

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' require 'msf/core/exploit/filedropper' class Metasploit3...

Ektron 8.02 XSLT Transform Remote Code Execution

This Metasploit module exploits a vulnerability in Ektron CMS 8.02 before SP5. The vulnerability exists due to the insecure usage of XslCompiledTransform, using a XSLT controlled by the user. The module has been tested successfully on Ektron CMS 8.02 over Windows 2003 SP2, which allows to execute...

Vulnerabilities in Ektron CMS Could Allow Arbitrary Code Execution

Executive Summary Microsoft is providing notification of the discovery and remediation of two vulnerabilities affecting Ektron Web Content Management System CMS. Microsoft discovered and disclosed the vulnerability under coordinated vulnerability disclosure to the affected vendor, Ektron. Ektron...

Ektron 8.02 XSLT Transform Remote Code Execution

This module exploits a vulnerability in Ektron CMS 8.02 before SP5. The vulnerability exists due to the insecure usage of XslCompiledTransform, using a XSLT controlled by the user. The module has been tested successfully on Ektron CMS 8.02 over Windows 2003 SP2, which allows to execute arbitrary...

Ektron CMS - Multiple Vulnerabilities - Security Advisory - SOS-12-009

Sense of Security - Security Advisory - SOS-12-009 Release Date. 05-Sep-2012 Last Update. - Vendor Notification Date. 07-May-2012 Product. Ektron CMS Platform. ASP.NET Affected versions. Ektron CMS version 8.5.0 and possibly others Severity Rating. High Impact. Exposure of sensitive information...