CVE-2012-1031

CVE-2012-1031 refers to an unspecified vulnerability in EPiServer CMS 5 and 6 up to 6R2 in certain configurations using Forms Authentication . The vulnerability allows remote authenticated users to obtain access to WebAdmins by leveraging Edit Mode privileges , and is noted as a different vulnera...

CVE-2012-1034

EPiServer CMS admin interface prior to 6R2 contains XSS vulnerabilities that allow remote attackers to inject arbitrary script/HTML via unspecified vectors. Affects EPiServer CMS through 6R2; CVSS v2 base score 4.3 (Medium). Remediation referenced in public hotfix materials (CMS 6-R2 hotfix); exp...