CVE-2017-15685

Crafter CMS Crafter Studio 3.0.1 is affected by: XML External Entity XXE. An unauthenticated attacker is able to create a site with specially crafted XML that allows the retrieval of OS files out-of-band...

CVE-2017-15685

Crafter CMS Crafter Studio 3.0.1 is affected by: XML External Entity XXE. An unauthenticated attacker is able to create a site with specially crafted XML that allows the retrieval of OS files out-of-band...

CVE-2017-15682

In Crafter CMS Crafter Studio 3.0.1 an unauthenticated attacker is able to inject malicious JavaScript code resulting in a stored/blind XSS in the admin panel...

CVE-2017-15684

Crafter CMS Crafter Studio 3.0.1 has a directory traversal vulnerability which allows unauthenticated attackers to view files from the operating system...

CVE-2017-15683

In Crafter CMS Crafter Studio 3.0.1 an unauthenticated attacker is able to create a site with specially crafted XML that allows the retrieval of OS files out-of-band...

CVE-2017-15686

Crafter CMS Crafter Studio 3.0.1 is affected by: Cross Site Scripting XSS, which allows remote attackers to steal users’ cookies...

CVE-2017-15681

In Crafter CMS Crafter Studio 3.0.1 a directory traversal vulnerability exists which allows unauthenticated attackers to overwrite files from the operating system which can lead to RCE...

CVE-2017-15681

In Crafter CMS Crafter Studio 3.0.1 a directory traversal vulnerability exists which allows unauthenticated attackers to overwrite files from the operating system which can lead to RCE...

Xxe

Crafter CMS Crafter Studio 3.0.1 is affected by: XML External Entity XXE. An unauthenticated attacker is able to create a site with specially crafted XML that allows the retrieval of OS files out-of-band...

CVE-2017-15680

In Crafter CMS Crafter Studio 3.0.1 an IDOR vulnerability exists which allows unauthenticated attackers to view and modify administrative data...

CVE-2017-15680

CVE-2017-15680 affects Crafter CMS Crafter Studio 3.0.1 and involves an insecure direct object reference (IDOR) that allows unauthenticated attackers to view and modify administrative data. The available connected records confirm the presence of an IDOR vulnerability in Crafter Studio 3.0.1, enab...

CVE-2017-15681

In Crafter CMS Crafter Studio 3.0.1 a directory traversal vulnerability exists which allows unauthenticated attackers to overwrite files from the operating system which can lead to RCE...

CVE-2017-15681

CVE-2017-15681 affects Crafter CMS Crafter Studio 3.0.1. A directory traversal vulnerability allows unauthenticated attackers to overwrite operating-system files, enabling remote code execution (RCE). Root cause is directory traversal in Crafter Studio 3.0.1. Exploit details are not provided in t...

CVE-2017-15682

CVE-2017-15682 affects Crafter CMS Crafter Studio 3.0.1. An unauthenticated attacker can inject malicious JavaScript, causing a stored/blind XSS in the admin panel. The available connected documents confirm the vulnerability is tied to Crafter Studio 3.0.1 and describe the impact as stored XSS, b...

CVE-2017-15682

In Crafter CMS Crafter Studio 3.0.1 an unauthenticated attacker is able to inject malicious JavaScript code resulting in a stored/blind XSS in the admin panel...

CVE-2017-15683

In Crafter CMS Crafter Studio 3.0.1 an unauthenticated attacker is able to create a site with specially crafted XML that allows the retrieval of OS files out-of-band...

CVE-2017-15684

Crafter CMS Crafter Studio 3.0.1 has a directory traversal vulnerability which allows unauthenticated attackers to view files from the operating system...

CVE-2017-15684

CVE-2017-15684 affects Crafter CMS Crafter Studio 3.0.1, describing a directory traversal vulnerability that allows unauthenticated attackers to view files from the operating system. The connected documents corroborate the same issue across multiple sources (Red Hat, GHSA, osv, nvd listing), cons...

CVE-2017-15685

Crafter CMS Crafter Studio 3.0.1 is affected by XML External Entity (XXE). An unauthenticated attacker can submit specially crafted XML to retrieve OS files out-of-band. The issue arises from the XXE vulnerability in this version; no additional exploit details orreal-world in-the-wild exploitatio...

CVE-2017-15686

CVE-2017-15686 affects Crafter CMS Crafter Studio 3.0.1. The vulnerability is Cross Site Scripting (XSS) that allows remote attackers to steal users’ cookies. The connected documents confirm the affected product/version and the category of vulnerability but do not provide root-cause details, expl...