Ektron CMS 'XslCompiledTransform' Class Remote Code Execution Vulnerability
BID:56816
Info
Ektron CMS 'XslCompiledTransform' Class Remote Code Execution Vulnerability
| Bugtraq ID: | 56816 |
| Class: | Boundary Condition Error |
| CVE: |
CVE-2012-5357 |
| Remote: | Yes |
| Local: | No |
| Published: | Dec 05 2012 12:00AM |
| Updated: | Mar 19 2015 08:44AM |
| Credit: | Richard Lundeen |
| Vulnerable: | |
| Not Vulnerable: | |
Discussion
Exploit / POC
Ektron CMS 'XslCompiledTransform' Class Remote Code Execution Vulnerability
The following exploit code is available:
The following exploit code is available:
Solution / Fix
Ektron CMS 'XslCompiledTransform' Class Remote Code Execution Vulnerability
Solution:
Updates are available. Please see the references for details.
Solution:
Updates are available. Please see the references for details.
References
Ektron CMS 'XslCompiledTransform' Class Remote Code Execution Vulnerability
References:
References:
- Ektron CMS Homepage (ektron)
- Microsoft Vulnerability Research Advisory MSVR12-016 (Microsoft)