PT-2010-4144 · Grafik · Grafik Cms

Published 2010-07-01 · Updated 2018-10-10 · CVE-2010-2615

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Grafik CMS versions 1.1.2 and earlier

Description The issue concerns multiple cross-site scripting (XSS) vulnerabilities. These vulnerabilities allow remote attackers to inject arbitrary web script or HTML via the page menu and description parameters in an edit page action.

Recommendations For Grafik CMS versions 1.1.2 and earlier, as a temporary workaround, consider restricting access to the admin/admin.php endpoint until a patch is available. Avoid using the page menu and description parameters in the edit page action to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2010-2615

Affected Products

Grafik Cms

References · 6

• 🔥 https://exploit-db.com/exploits/14342 · Exploit
• 🔥 http://htbridge.ch/advisory/xss_vulnerability_in_grafik_cms_1.html · Exploit
• 🔥 http://htbridge.ch/advisory/xss_vulnerability_in_grafik_cms.html · Exploit
• http://vupen.com/english/advisories/2010/1629 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2010-2615 · Security Note
• http://securityfocus.com/archive/1/512072/100/0/threaded · Note