Nodes Studio CMS Multiple Security Vulnerabilities
BID:74206
Info
Nodes Studio CMS Multiple Security Vulnerabilities
| Bugtraq ID: | 74206 |
| Class: | Input Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Apr 16 2015 12:00AM |
| Updated: | May 12 2015 07:35PM |
| Credit: | MustLive |
| Vulnerable: |
Nodes Studio Nodes Studio CMS 0 |
| Not Vulnerable: | |
Discussion
Nodes Studio CMS Multiple Security Vulnerabilities
Nodes Studio CMS is prone to multiple security vulnerabilities.
An attacker can leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site, potentially allowing the attacker to steal cookie-based authentication credentials, compromise the application, access or modify data or to obtain sensitive information that may aid in further attacks.
Nodes Studio CMS is prone to multiple security vulnerabilities.
An attacker can leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site, potentially allowing the attacker to steal cookie-based authentication credentials, compromise the application, access or modify data or to obtain sensitive information that may aid in further attacks.
Exploit / POC
Nodes Studio CMS Multiple Security Vulnerabilities
Attackers can use a browser to exploit these issues. To exploit the cross-site scripting issue, an attacker must entice an unsuspecting user into following a malicious URI.
Attackers can use a browser to exploit these issues. To exploit the cross-site scripting issue, an attacker must entice an unsuspecting user into following a malicious URI.
Solution / Fix
Nodes Studio CMS Multiple Security Vulnerabilities
Solution:
Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution:
Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
References
Nodes Studio CMS Multiple Security Vulnerabilities
References:
References: