EDB-4790
funktionalRunCMS 1.6 - Multiple Vulnerabilities
Exploit ansehen Quelle exploit_dbverifiziertTyp webappsAutor DSecRGveröffentlicht 2007-12-25Katalog exploit_db
01
ausgenutzte CVEs (4)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2007-6545US | medium4.3 | Exploit | ||
Multiple cross-site scripting (XSS) vulnerabilities in RunCMS before 1.6.1 allow remote attackers to inject arbitrary web script or HTML via (1) the subject parameter to modules/ne… | ||||
| CVE-2007-6546US | medium6.4 | Exploit | ||
RunCMS before 1.6.1 uses a predictable session id, which makes it easier for remote attackers to hijack sessions via a modified id. | ||||
| CVE-2007-6547US | medium6.8 | Exploit | ||
RunCMS before 1.6.1 does not require entry of the old password during a password change, which allows context-dependent attackers to change passwords upon obtaining temporary acces… | ||||
| CVE-2007-6548US | high7.5 | Exploit | ||
Multiple direct static code injection vulnerabilities in RunCMS before 1.6.1 allow remote authenticated administrators to inject arbitrary PHP code via the (1) header and (2) foote… | ||||
scry
Funktionierende Exploits wie dieser zielen auf über das Internet erreichbare Systeme. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan