EUVD-2019-8011

Malware in sbrugna...

Orckestra C1 CMS Code Execution Vulnerability

Orckestra C1 CMS is an open source web content management system CMS based on . A security vulnerability exists in the EntityTokenSerializer class of the Composite.dll file in Orckestra C1 CMS 6.6 and earlier versions. An attacker can exploit the vulnerability to execute code...

CVE-2019-18211

An issue was discovered in Orckestra C1 CMS through 6.6. The EntityTokenSerializer class in Composite.dll is prone to unvalidated deserialization of wrapped BinaryFormatter payloads, leading to arbitrary remote code execution for any low-privilege user...

Deserialization of untrusted data

An issue was discovered in Orckestra C1 CMS through 6.6. The EntityTokenSerializer class in Composite.dll is prone to unvalidated deserialization of wrapped BinaryFormatter payloads, leading to arbitrary remote code execution for any low-privilege user...