Contentserver Security Vulnerabilities and Issues — Contentserver CVE List

ActivewebContentserver

4 matches found

CVE•added 2007/07/15 11:0 p.m.•104 views

CVE-2007-3014

CVE-2007-3014 affects activeWeb contentserver prior to 5.6.2964. The vulnerability is multiple cross-site scripting (XSS) flaws exploitable via the msg parameter in errors/rights.asp and errors/transaction.asp, and via the name of a MIME type when adding new mimetypes. Affected versions are

4.3CVSS5.6AI score0.0448EPSS

Web

CVE•added 2007/07/17 12:0 a.m.•60 views

CVE-2007-3017

The CVE-2007-3017 issue affects the activeWeb contentserver CMS (WYSIWYG editor applet). The root cause is insufficient server-side filtering of article content, where malicious tags bypass client-side protections and enable JavaScript injection via a POST to admin/worklist/worklist_edit.asp afte...

4CVSS6.2AI score0.05142EPSS

CVE•added 2007/07/15 11:0 p.m.•54 views

CVE-2007-3013

CVE-2007-3013 affects activeWeb contentserver: SQL injection in the picture_real_edit.asp endpoint (id parameter) that can be exploited by editors with edit permission to execute arbitrary SQL. Affected versions were

6.5CVSS7.8AI score0.02899EPSS

Web

CVE•added 2007/07/17 12:0 a.m.•49 views

CVE-2007-3018

CVE-2007-3018 concerns activeWeb contentserver CMS prior to 5.6.2964, where editors with restricted accounts could create files in arbitrary directories. This is a permission settings flaw in the CMS editor interface, allowing creation of new documents outside permitted folders. The fixed version...

4CVSS6.6AI score0.01003EPSS