razorCMS 0.3RC2 Multiple Vulnerabilities
BID:34566
Info
razorCMS 0.3RC2 Multiple Vulnerabilities
| Bugtraq ID: | 34566 |
| Class: | Unknown |
| CVE: | |
| Remote: | Yes |
| Local: | Yes |
| Published: | Apr 16 2009 12:00AM |
| Updated: | Apr 17 2009 03:16PM |
| Credit: | Jeremi Gosney |
| Vulnerable: |
Morgan Integrated Systems razorCMS 0.3RC2 |
| Not Vulnerable: |
Morgan Integrated Systems razorCMS 0.4 |
Discussion
razorCMS 0.3RC2 Multiple Vulnerabilities
razorCMS is prone to a local information-disclosure vulnerability, a local access-validation vulnerability, a security-bypass vulnerability, and multiple cross-site-scripting vulnerabilities.
Attackers can exploit these issues to gain access to sensitive information, create denial-of-service conditions, gain elevated privileges, or execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. Successful exploits may aid in further attacks.
razorCMS 0.3RC2 is vulnerable; other versions may also be affected.
razorCMS is prone to a local information-disclosure vulnerability, a local access-validation vulnerability, a security-bypass vulnerability, and multiple cross-site-scripting vulnerabilities.
Attackers can exploit these issues to gain access to sensitive information, create denial-of-service conditions, gain elevated privileges, or execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. Successful exploits may aid in further attacks.
razorCMS 0.3RC2 is vulnerable; other versions may also be affected.
Exploit / POC
razorCMS 0.3RC2 Multiple Vulnerabilities
An attacker can exploit the local issues using readily available tools. For cross-site-scripting attacks, the attacker must entice an unsuspecting victim to follow a malicious URI.
The following example URIs are available:
An attacker can exploit the local issues using readily available tools. For cross-site-scripting attacks, the attacker must entice an unsuspecting victim to follow a malicious URI.
The following example URIs are available:
Solution / Fix
razorCMS 0.3RC2 Multiple Vulnerabilities
Solution:
The vendor released an update to address this issue. Please see the references for more information.
Solution:
The vendor released an update to address this issue. Please see the references for more information.
References
razorCMS 0.3RC2 Multiple Vulnerabilities
References:
References:
- razorCMS - Multiple Vulnerabilities (Jeremi Gosney)
- razorCMS Homepage (Morgan Integrated Systems)