EZTechhelp Company EZCMS Multiple Unspecified Vulnerabilities

Bugtraq ID:	29842
Class:	Unknown
CVE:
Remote:	Yes
Local:	No
Published:	Jun 20 2008 12:00AM
Updated:	Jun 23 2008 07:51PM
Credit:	The vendor disclosed these issues.
Vulnerable:	EZTechhelp Company EZCMS 1.2
Not Vulnerable:	EZTechhelp Company EZCMS 1.2.1

EZTechhelp Company EZCMS Multiple Unspecified Vulnerabilities

EZCMS is prone to multiple vulnerabilities, including an SQL-injection issue and unspecified issues affecting the application's 'News manager', 'Calendar', and 'Contact form manager' features.

A successful exploits may allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database. Other attacks are also possible.

EZCMS 1.2 and prior versions are affected.

EZTechhelp Company EZCMS Multiple Unspecified Vulnerabilities

Attackers can exploit these issues using a browser.

EZTechhelp Company EZCMS Multiple Unspecified Vulnerabilities

Solution:
The vendor released EZCMS 1.2.1 to address these issues. Please see the references for more information.


EZTechhelp Company EZCMS 1.2

• EZTechhelp Company ezcms1_2_1_patch.zip
  http://ezcms.eztechhelp.com/release/ezcms1_2_1_patch.zip

EZTechhelp Company EZCMS Multiple Unspecified Vulnerabilities

References:

• EZCMS 1.2.1 Security Patch (EZTechhelp Company)
  
• EZCMS Product Page (EZTechhelp Company)