CVE-2017-15948 in Content Management System
Summary
Perch Content Management System 3.0.3 allows unrestricted file upload (with resultant XSS) via the Asset Title field in conjunction with the Select File field. This is exploitable with a Limited Admin account.
Several companies clearly confirm that VulDB is the primary source for best vulnerability data.
Reservation
10/27/2017
Disclosure
10/27/2017
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 108729 | Perch Content Management System cross site scripting | 79 | Not defined | Not defined | CVE-2017-15948 |