PT-2009-3962 · Razorcms · Razorcms

Jeremi Gosney · Publicado 2009-04-28 · Atualizado 2017-08-17 · CVE-2009-1461

Positive Technologies (AI Summary)

CVSS v2.0

3.5

Baixa

Vetor base

AV:N/AC:M/Au:S/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions razorCMS versions 0.3 RC2 and earlier

Description The issue concerns a cross-site scripting (XSS) vulnerability in the Create New Page form. This vulnerability allows remote authenticated users to inject arbitrary web script or HTML via the Page Title field.

Recommendations For versions 0.3 RC2 and earlier, update to a version later than 0.3 RC2 to resolve the issue.

Exploit

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2009-1461

Produtos afetados

Razorcms

Referências · 5

• 🔥 http://razorcms.co.uk/support/viewtopic.php?f=13&t=325 · Exploit
• 🔥 http://marc.info/?l=full-disclosure&m=123998062108561&w=2 · Exploit
• http://securityfocus.com/bid/34854 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2009-1461 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/50357 · Nota