Squiz Matrixa Remote Code Execution Vulnerability

Squiz Matrix is an enterprise content management system from Squiz Australia. A remote code execution vulnerability exists in Squiz Matrix versions prior to 5.3.6.1 and 5.4.x versions prior to 5.4.1.3. A remote attacker can exploit the vulnerability to execute code with the help of a maliciously...

CVE-2017-14198: Improper Control of Generation of Code

An issue was discovered in Squiz Matrix before 5.3.6.1 and 5.4.x before 5.4.1.3. Authenticated users with permissions to edit design assets can cause Remote Code Execution RCE via a maliciously crafted timeformat tag...