exploit/windows/http/ektron_xslt_exec

weaponized

Ektron 8.02 XSLT Transform Remote Code Execution

view exploit source metasploittype exploitpublished 2012-10-16catalog metasploit

exploited CVEs (1)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2012-5357US	critical9.8	67.8% (99th)	Exploit	2017-10-30
Ektron Content Management System (CMS) before 8.02 SP5 uses the XslCompiledTransform class with enablescript set to true, which allows remote attackers to execute arbitrary code wi…

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.