36 matches found
Code injection
MonoX through 5.1.40.5152 allows administrators to execute arbitrary code by modifying an ASPX template...
Deserialization of untrusted data
MonoX through 5.1.40.5152 allows remote code execution via HTML5Upload.ashx or Pages/SocialNetworking/lng/en-US/PhotoGallery.aspx because of deserialization in ModuleGallery.HTML5Upload, ModuleGallery.SilverLightUploadModule, HTML5Upload, and SilverLightUploadHandler...
CVE-2020-12473
MonoX through 5.1.40.5152 allows admins to execute arbitrary programs by reconfiguring the Converter Executable setting from ffmpeg.exe to a different program...
CVE-2020-12472
MonoX through 5.1.40.5152 allows stored XSS via User Status, Blog Comments, or Blog Description...
CVE-2020-12472
MonoX through 5.1.40.5152 allows stored XSS via User Status, Blog Comments, or Blog Description...
CVE-2020-12473
MonoX through 5.1.40.5152 allows admins to execute arbitrary programs by reconfiguring the Converter Executable setting from ffmpeg.exe to a different program...
Cross site scripting
MonoX through 5.1.40.5152 allows stored XSS via User Status, Blog Comments, or Blog Description...
Code injection
MonoX through 5.1.40.5152 allows admins to execute arbitrary programs by reconfiguring the Converter Executable setting from ffmpeg.exe to a different program...
CVE-2020-12470
MonoX CMS: CVE-2020-12470 affects MonoX up to version 5.1.40.5152. The vulnerability allows administrators to execute arbitrary code by modifying an ASPX template. Root cause is modification of the server-side template leading to code execution with high impact (as per multiple sources in connect...
CVE-2020-12470
MonoX through 5.1.40.5152 allows administrators to execute arbitrary code by modifying an ASPX template...
CVE-2020-12471
MonoX through 5.1.40.5152 allows remote code execution via HTML5Upload.ashx or Pages/SocialNetworking/lng/en-US/PhotoGallery.aspx because of deserialization in ModuleGallery.HTML5Upload, ModuleGallery.SilverLightUploadModule, HTML5Upload, and SilverLightUploadHandler...
CVE-2020-12471
Monox CMS 5.1.40.5152 and earlier versions are affected by an insecure deserialization flaw in MonoX components (ModuleGallery.HTML5Upload, ModuleGallery.SilverLightUploadModule, HTML5Upload, SilverLightUploadHandler) that enables remote code execution via HTML5Upload.ashx or Pages/SocialNetworki...
CVE-2020-12472
MonoX CMS (up to version 5.1.40.5152) contains a stored XSS in User Status, Blog Comments, and Blog Description due to insufficient validation of client-side data. Exploitation in the wild is not detailed in the provided documents; impact is client-side script execution when affected fields are v...
CVE-2020-12472
MonoX through 5.1.40.5152 allows stored XSS via User Status, Blog Comments, or Blog Description...