XSS vulnerability in Rumba CMS tags

Vulnerability ID: HTB22591 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityinrumbacms.html Product: Rumba CMS Vendor: Rumba Netware Ltd. http://rumbacms.com Vulnerable Version: 2.4 and Probably Prior Versions Vendor Notification: 18 August 2010 Vulnerability Type: Stored XSS Cross Site...

XSS vulnerability in Rumba CMS

Vulnerability ID: HTB22592 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityinrumbacms1.html Product: Rumba CMS Vendor: Rumba Netware Ltd. http://rumbacms.com Vulnerable Version: 2.4 and Probably Prior Versions Vendor Notification: 18 August 2010 Vulnerability Type: Stored XSS Cross Sit...

Rumba CMS 2.4 Cross Site Scripting

================================== Vulnerability ID: HTB22591 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityinrumbacms.html Product: Rumba CMS Vendor: Rumba Netware Ltd. http://rumbacms.com Vulnerable Version: 2.4 and Probably Prior Versions Vendor Notification: 18 August 2010...

Cross-site Request Forgery (CSRF) Vulnerabilities in Rumba CMS

High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in Rumba CMS which could be exploited to perform cross-site request forgery attacks. 1 Cross-site request forgery CSRF in Rumba CMS 1.1 The vulnerability exists due to insufficient validation of the request origin i...