PT-2017-6811 · Anchor · Anchor Cms

A0Xnirudh · Publicado 2017-09-07 · Atualizado 2017-09-13 · CVE-2015-5060

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions anchor-cms versions prior to 0.9-dev

Description The issue is related to a cross-site scripting (XSS) vulnerability. Cross-site scripting is a type of security vulnerability that occurs when an attacker is able to inject malicious scripts into a website, which are then executed by the user's browser.

Recommendations For versions prior to 0.9-dev, update to version 0.9-dev or later to resolve the issue.

Exploit

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2015-5060

Produtos afetados

Anchor Cms

Referências · 2

• 🔥 http://github.com/anchorcms/anchor-cms/issues/875 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2015-5060 · Nota de Segurança