CVE-2015-0931

Ektron Content Management System CMS 8.5 and 8.7 before 8.7sp2 and 9.0 before sp1, when the Saxon XSLT parser is used, allows remote attackers to execute arbitrary code via a crafted XSLT document, related to a "resource injection" issue...

CVE-2015-0923

The ContentBlockEx method in Workarea/ServerControlWS.asmx in Ektron Content Management System CMS 8.5 and 8.7 before 8.7sp2 and 9.0 before sp1 allows remote attackers to read arbitrary files via an external entity declaration in conjunction with an entity reference within an XML document named i...

Design/Logic Flaw

Ektron Content Management System CMS 8.5 and 8.7 before 8.7sp2 and 9.0 before sp1, when the Saxon XSLT parser is used, allows remote attackers to execute arbitrary code via a crafted XSLT document, related to a "resource injection" issue...

Xxe

The ContentBlockEx method in Workarea/ServerControlWS.asmx in Ektron Content Management System CMS 8.5 and 8.7 before 8.7sp2 and 9.0 before sp1 allows remote attackers to read arbitrary files via an external entity declaration in conjunction with an entity reference within an XML document named i...

CVE-2015-0931

Ektron CMS versions 8.5, 8.7 before 8.7sp2, and 9.0 before sp1 are affected. When the Saxon XSLT parser is used, a crafted XSLT document can trigger a resource injection vulnerability that allows remote execution of arbitrary code on the server (in the application’s privileges). Root cause: impro...

CVE-2015-0923

The ContentBlockEx method in Workarea/ServerControlWS.asmx in Ektron Content Management System CMS 8.5 and 8.7 before 8.7sp2 and 9.0 before sp1 allows remote attackers to read arbitrary files via an external entity declaration in conjunction with an entity reference within an XML document named i...

CVE-2015-0923

The CVE-2015-0923 vulnerability affects Ektron CMS versions 8.5, 8.7 before 8.7sp2, and 9.0 before sp1, in ContentBlockEx via Workarea/ServerControlWS.asmx. An XML External Entity (XXE) flaw arises when an XML document is named in the xslt parameter, allowing remote, unauthenticated readers to ac...

CVE-2015-0931

Ektron Content Management System CMS 8.5 and 8.7 before 8.7sp2 and 9.0 before sp1, when the Saxon XSLT parser is used, allows remote attackers to execute arbitrary code via a crafted XSLT document, related to a "resource injection" issue...

CVE-2015-0923: Undefined Security Weakness

The ContentBlockEx method in Workarea/ServerControlWS.asmx in Ektron Content Management System CMS 8.5 and 8.7 before 8.7sp2 and 9.0 before sp1 allows remote attackers to read arbitrary files via an external entity declaration in conjunction with an entity reference within an XML document named i...

PT-2015-4973

Name of the Vulnerable Software and Affected Versions Ektron Content Management System CMS versions 8.5 through 8.7 before 8.7sp2 Ektron Content Management System CMS version 9.0 before sp1 Description The issue allows remote attackers to read arbitrary files via an external entity declaration in...

CVE-2015-0931: Improper Neutralization of Special Elements in Output Used by a Downstream Component

Ektron Content Management System CMS 8.5 and 8.7 before 8.7sp2 and 9.0 before sp1, when the Saxon XSLT parser is used, allows remote attackers to execute arbitrary code via a crafted XSLT document, related to a "resource injection" issue...

PT-2015-4979

Name of the Vulnerable Software and Affected Versions Ektron Content Management System CMS versions 8.5 through 8.7 before 8.7sp2 Ektron Content Management System CMS version 9.0 before sp1 Description The issue allows remote attackers to execute arbitrary code via a crafted XSLT document, relate...

Ektron CMS 'ServerControlWS.asmx' XML External Entity Injection Vulnerability

Ektron CMS is a content management system. An external entity injection vulnerability exists in the Ektron CMS 'ServerControlWS.asmx' XML due to the application failing to properly filter user-supplied input before dynamically generating content. An attacker could use this vulnerability to read t...

Ektron Content Management System (CMS) contains multiple vulnerabilities

Overview Ektron Content Management System CMS versions 8.5, 8.7, and 9.0 contain a XXE and a resource injection vulnerability. Description Note: A prior version of this report indicated incorrectly that Ektron CMS version 9.1 was vulnerable. The vendor indicated that the last version to ship with...

Ektron 8.5, 8.7, 9.0 XSLT Transform Remote Code Execution

Ektron 8.5, 8.7 use exploit/windows/http/ektron/xsltexecws msf undefinedxsltexecws show actions ...actions... msf undefinedxsltexecws set ACTION msf undefinedxsltexecws show options ...show and set options... msf undefinedxsltexecws run This module requires Metasploit:...

Ektron CMS 8.5.0 - Multiple Vulnerabilities

No description provided by source. Sense of Security - Security Advisory - SOS-12-009 Release Date. 05-Sep-2012 Last Update. - Vendor Notification Date. 07-May-2012 Product. Ektron CMS Platform. ASP.NET Affected versions. Ektron CMS version 8.5.0 and possibly others Severity Rating. High Impact...

Ektron 8.02 XSLT Transform Remote Code Execution

No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' require...

Ektron CMS400.NET 7.5.2 Multiple Security Vulnerabilities

No description provided by source. source: http://www.securityfocus.com/bid/39679/info Ektron CMS400.NET is prone to multiple security vulnerabilities, including multiple cross-site scripting issues, an information-disclosure issue, a cookie-manipulation issue, a directory-traversal issue, a...

Acunetix Web Vulnerability Scanner Version 9 - Web Application Security Testing Tool

Acunetix W eb V ulnerability S canner WVS is an automated web application security testing tool that audits your web applications by checking for exploitable hacking vulnerabilities. Automated scans may be supplemented and cross-checked with the variety of manual tools to allow for comprehensive...

[SECURITY] Stored Cross Site Scripting in Ektron CMS 8.7

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Stored Cross Site Scripting in Ektron CMS 8.7 CVE reference: CVE-2014-2729 Affected platforms: Ektron Web Content Management System Version: 8.7.0 Date: 2013-December-19 Security risk: Medium CVSS - AV:N/AC:L/Au:S/C:P/I:P/A:N Researcher: Joseph Zeng...