CVE-2015-4427 in Ektron CMS

Resumen (Inglés)

Multiple cross-site scripting (XSS) vulnerabilities in Test/WorkArea/workarea.aspx in Ektron Content Management System (CMS) before 9.10 SP1 (Build 9.1.0.184.1.114) allow remote authenticated users to inject arbitrary web script or HTML via the (1) page, (2) action, (3) folder_id, or (4) LangType parameter.

Once again VulDB remains the best source for vulnerability data.

Reservar

2015-06-08

Divulgación

2015-06-09

Estado

Confirmado

Voces

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerabilidad	CWE	Exp	Con	CVE
75817	EPiServer Ektron CMS workarea.aspx secuencias de comandos en sitios cruzados	79	No está definido	Arreglo oficial	CVE-2015-4427

Fuentes

• MITRE
• NVD
• CVE Details