Lucene search
K

KesionCMS V9.5一处鸡肋的xss可打前台用户后台管理(两个猥琐的思路让鸡肋不再鸡肋)#2

🗓️ 29 May 2014 00:00:00Reported by RootType 
seebug
 seebug
🔗 www.seebug.org👁 55 Views

KesionCMS V9.5 xss vulnerability allows unauthorized access to both front-end and back-end user management. Applies to admin and non-admin users, and can be exploited via the "Friend Link" feature. Additionally, default credentials for the CMS are publicly available.

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation