111 matches found
CVE-2018-16727
razorCMS 3.4.7 allows Stored XSS via the keywords of the homepage within the settings component...
CVE-2018-16726
razorCMS 3.4.7 allows HTML injection via the description of the homepage within the settings component...
CVE-2018-16726
razorCMS 3.4.7 allows HTML injection via the description of the homepage within the settings component...
Design/Logic Flaw
razorCMS 3.4.7 allows HTML injection via the description of the homepage within the settings component...
Cross site scripting
razorCMS 3.4.7 allows Stored XSS via the keywords of the homepage within the settings component...
CVE-2018-16727
razorCMS 3.4.7 is affected by a Stored XSS in the Settings component via the homepage keywords parameter. The CNVD entry additionally notes that a remote attacker can execute arbitrary code in a user’s browser through this vector. No patch/version details or mitigations are provided in the connec...
CVE-2018-16726
razorCMS 3.4.7 is affected by an HTML injection vulnerability: attackers can inject HTML via the homepage description in the Settings component. The issue is confirmed across multiple sources (NVD/CNVD) and is tied to the description field rather than a dedicated input validation path. The provid...
CVE-2018-16727
razorCMS 3.4.7 allows Stored XSS via the keywords of the homepage within the settings component...
CVE-2018-16726
razorCMS 3.4.7 allows HTML injection via the description of the homepage within the settings component...
razorCMS Cross-Site Scripting Vulnerability
razorCMS is a web content management system. A cross-site scripting vulnerability exists in razorCMS version 2.1, where an attacker can write arbitrary JavaScript code to trigger a cross-site scripting attack due to the lack of special character filtering on user input...
razorCMS 1.2 Path Traversal Vulnerability
No description provided by source. Exploit Title: razorCMS 1.2 Path Traversal Google Dork: Powered by razorCMS Date: January 10, 2012 Author: chap0 Software Link: http://www.razorcms.co.uk/archive/core/ Version: 1.2 Tested on: Ubuntu Patch: Upgrade to latest release 1.2.1 Greetz To: Insert Name...
razorCMS 0.3RC2 Multiple Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/34566/info razorCMS is prone to a local information-disclosure vulnerability, a local access-validation vulnerability, a security-bypass vulnerability, and multiple cross-site-scripting vulnerabilities. Attackers can...
RazorCMS <= 1.2.1 STABLE File Upload Vulnerability
No description provided by source. Exploit Title: RazorCMS = 1.2.1 STABLE File Upload Vulnerability Google Dork: ? Date: 2012-02-26 Author: i2secHyo jun Oh Software Link: http://www.razorcms.co.uk/archive/core/razorCMScorev121STABLE.zip Version: RazorCMS 1.2.1 Tested on: Windows XP Upload a file...
RazorCMS <= 1.2.1 STABLE CSRF (Delete Web Pages)
No description provided by source. +------------------------------------------------------------------------------------------------------------------------------------+ Exploit Title : RazorCMS = 1.2.1 STABLE CSRF Delete Web Pages Date : 08-03-2012 Author : Ivano Binetti...
CVE-2012-6038
admin/core/adminfunc.php in razorCMS before 1.2.1 does not properly restrict access to certain administrator directories and files, which allows remote authenticated users to read, edit, rename, move, copy and delete files via the 1 dir parameter in a fileman or 2 filemanview action. NOTE: this...
Path traversal
admin/core/adminfunc.php in razorCMS before 1.2.1 does not properly restrict access to certain administrator directories and files, which allows remote authenticated users to read, edit, rename, move, copy and delete files via the 1 dir parameter in a fileman or 2 filemanview action. NOTE: this...
CVE-2012-6038
The CVE-2012-6038 entry concerns razorCMS prior to 1.2.1 where admin/core/admin_func.php fails to restrict access to certain administrator directories/files. The vulnerability enables remote authenticated users to read, edit, rename, move, copy and delete files through (1) the dir parameter in fi...
CVE-2012-6038
admin/core/adminfunc.php in razorCMS before 1.2.1 does not properly restrict access to certain administrator directories and files, which allows remote authenticated users to read, edit, rename, move, copy and delete files via the 1 dir parameter in a fileman or 2 filemanview action. NOTE: this...