CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

3 matches found

OSV•added 2023/05/18 7:15 a.m.•32 views

CVE-2019-25137

Umbraco CMS 4.11.8 through 7.15.10, and 7.12.4, allows Remote Code Execution by authenticated administrators via msxsl:script in an xsltSelection to developer/Xslt/xsltVisualize.aspx...

7.2CVSS7.7AI score

SaveExploits0References4

Prion•added 2023/05/18 7:15 a.m.•27 views

Remote code execution

Umbraco CMS 4.11.8 through 7.15.10, and 7.12.4, allows Remote Code Execution by authenticated administrators via msxsl:script in an xsltSelection to developer/Xslt/xsltVisualize.aspx...

5.8CVSS7.1AI score0.0412EPSS

SaveExploits1References4Affected Software1

Rapid7 Vulnerability Database (full)•added 2023/05/18 12:00 a.m.•3 views

CVE-2019-25137: XML Injection (aka Blind XPath Injection)

Umbraco CMS 4.11.8 through 7.15.10, and 7.12.4, allows Remote Code Execution by authenticated administrators via msxsl:script in an xsltSelection to developer/Xslt/xsltVisualize.aspx...

7.2CVSS5.8AI score0.0412EPSS

SaveExploits1References3

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by