PT-2018-6710

Name of the Vulnerable Software and Affected Versions: Progress Sitefinity versions prior to 10.1 Description: The issue concerns a problem where malicious input can be injected via the Last name, First name, and About fields on the New User Creation Page, allowing for potential attacks...

PT-2018-6712

Name of the Vulnerable Software and Affected Versions: Progress Sitefinity versions prior to 10.1 Description: The issue concerns the use of a non-expiring authentication token, wrap access token, which remains valid even after a password change or session termination. This token is also...

PT-2018-6709

Name of the Vulnerable Software and Affected Versions: Progress Sitefinity versions prior to 10.1 Description: The issue allows for XSS via file upload. This occurs because JavaScript code in an HTML file has the same origin as the application's own code. Recommendations: For versions prior to...

CVE-2017-18179: Improper Authentication

Progress Sitefinity 9.1 uses wrapaccesstoken as a non-expiring authentication token that remains valid after a password change or a session termination. Also, it is transmitted as a GET parameter. This is fixed in 10.1...

PT-2018-6708

Name of the Vulnerable Software and Affected Versions: Progress Sitefinity versions prior to 10.1 Description: The issue concerns a problem with the Content Management Template Configuration, also known as Templateconfiguration, where an XSS attack can be performed. This is demonstrated by the sr...

Progress Sitefinity 10.0 / 10.1 Broken Access Control / LINQ Injection Vulnerability

Exploit for multiple platform in category web applications ======================================================================= title: Broken access control & LINQ injection product: Progress Sitefinity vulnerable version: 10.0, 10.1 fixed version: =10.1.6527.0 internal build, 10.2 CVE number:...

Progress Sitefinity 10.0 / 10.1 Broken Access Control / LINQ Injection

SEC Consult Vulnerability Lab Security Advisory ======================================================================= title: Broken access control & LINQ injection product: Progress Sitefinity vulnerable version: 10.0, 10.1 fixed version: =10.1.6527.0 internal build, 10.2 CVE number: - impact:...

Sitefinity CMS 9.2 Cross Site Scripting

Exploit Title: Stored Cross Site Scripting XSS in Progress Sitefinity CMS 9.2 Date: Aug 31, 2017 Exploit Author: Pralhad Chaskar Vendor Homepage: http://www.sitefinity.com/ Tested on: Progress Sitefinity CMS 9.2 and lower CVE : NA Vendor Description ------------------ ProgressAr SitefinityaC/ is ...

Sitefinity CMS 9.2 - Cross-Site Scripting Vulnerability

Exploit for asp platform in category web applications Exploit Title: Stored Cross Site Scripting XSS in Progress Sitefinity CMS 9.2 Date: Aug 31, 2017 Exploit Author: Pralhad Chaskar Vendor Homepage: http://www.sitefinity.com/ Tested on: Progress Sitefinity CMS 9.2 and lower CVE : NA Vendor...

Sitefinity CMS 9.2 - Cross-Site Scripting

Sitefinity CMS 9.2 - Cross-Site Scripting Exploit Title: Stored Cross Site Scripting XSS in Progress Sitefinity CMS 9.2 Date: Aug 31, 2017 Exploit Author: Pralhad Chaskar Vendor Homepage: http://www.sitefinity.com/ Tested on: Progress Sitefinity CMS 9.2 and lower CVE : NA Vendor Description...

Sitefinity CMS 9.2 - Cross-Site Scripting

Exploit Title: Stored Cross Site Scripting XSS in Progress Sitefinity CMS 9.2 Date: Aug 31, 2017 Exploit Author: Pralhad Chaskar Vendor Homepage: http://www.sitefinity.com/ Tested on: Progress Sitefinity CMS 9.2 and lower CVE : NA Vendor Description ------------------ Progress® Sitefinity™ is a...

Progress Sitefinity 9.1 XSS / Session Management / Open Redirect

SEC Consult Vulnerability Lab Security Advisory ======================================================================= title: Multiple vulnerabilities product: Progress Sitefinity vulnerable version: 9.1 fixed version: 10.1 CVE number: - impact: High homepage: http://www.sitefinity.com |...

Progress Sitefinity 9.1 XSS Vulnerability

Progress Sitefinity version 9.1 suffers from cross site scripting, broken session management, and open redirection vulnerabilities. ======================================================================= title: Multiple vulnerabilities product: Progress Sitefinity vulnerable version: 9.1 fixed...