razorcms razorcms 0.3 vulnerabilities and exploits

(subscribe to this query)

6.8

CVSSv2

Cross-site request forgery (CSRF) vulnerability in razorCMS prior to 0.4 allows remote malicious users to hijack the authentication of administrators for requests that create a web page containing PHP code.

Razorcms Razorcms Razorcms Razorcms 0.2 Razorcms Razorcms 0.3

4.6

CVSSv2

razorCMS prior to 0.4 uses weak permissions for (1) admin/core/admin_config.php, which allows local users to obtain the administrator's password hash and FTP user credentials; and (2) the root directory, (3) datastore/, and (4) admin/core/, which allows local users to have a...

Razorcms Razorcms 0.2 Razorcms Razorcms 0.3 Razorcms Razorcms

7.2

CVSSv2

The Security Manager in razorCMS prior to 0.4 does not verify the permissions of every file owned by the apache user account, which is inconsistent with the documentation and allows local users to have an unspecified impact.

Razorcms Razorcms 0.3 Razorcms Razorcms 0.2 Razorcms Razorcms

7.5

CVSSv2

Static code injection vulnerability in razorCMS prior to 0.4 allows remote malicious users to inject arbitrary PHP code into any page by saving content as a .php file.

Razorcms Razorcms 0.2 Razorcms Razorcms 0.3 Razorcms Razorcms

6.5

CVSSv2

admin/core/admin_func.php in razorCMS prior to 1.2.1 does not properly restrict access to certain administrator directories and files, which allows remote authenticated users to read, edit, rename, move, copy and delete files via the (1) dir parameter in a fileman or (2) filemanv...

Razorcms Razorcms 1.0 Razorcms Razorcms 0.3 Razorcms Razorcms 0.2 Razorcms Razorcms Razorcms Razorcms 1.1 Razorcms Razorcms 0.4

1 EDB exploit

6.8

CVSSv2

Cross-site request forgery (CSRF) vulnerability in admin/index.php in RazorCMS 1.2.1 and previous versions allows remote malicious users to hijack the authentication of administrators for requests that delete arbitrary web pages via a showcats action.

Razorcms Razorcms Razorcms Razorcms 0.3 Razorcms Razorcms 1.0 Razorcms Razorcms 0.2 Razorcms Razorcms 1.2 Razorcms Razorcms 1.1 Razorcms Razorcms 0.4

1 EDB exploit

3.5

CVSSv2

Cross-site scripting (XSS) vulnerability in the Create New Page form in razorCMS 0.3 RC2 and previous versions allows remote authenticated users to inject arbitrary web script or HTML via the Page Title field.

Razorcms Razorcms 0.2 Razorcms Razorcms

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook