ddsn cm3 acora content management system 5.5.0 1b-p1 vulnerabilities and exploits

(subscribe to this query)

Open redirect vulnerability in DDSN Interactive cm3 Acora CMS 6.0.6/1a, 6.0.2/1a, 5.5.7/12b, 5.5.0/1b-p1, and possibly other versions allows remote malicious users to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the l parameter to track.aspx.

Ddsn Cm3 Acora Content Management System 6.0.2/1a Ddsn Cm3 Acora Content Management System 5.5.7/12b Ddsn Cm3 Acora Content Management System 5.5.0/1b-p1 Ddsn Cm3 Acora Content Management System 6.0.6/1a

DDSN Interactive cm3 Acora CMS 6.0.6/1a, 6.0.2/1a, 5.5.7/12b, 5.5.0/1b-p1, and possibly other versions, does not set the secure flag for an unspecified cookie in an https session, which makes it easier for remote malicious users to capture this cookie by intercepting its transmis...

Ddsn Cm3 Acora Content Management System 6.0.2/1a Ddsn Cm3 Acora Content Management System 5.5.7/12b Ddsn Cm3 Acora Content Management System 5.5.0/1b-p1 Ddsn Cm3 Acora Content Management System 6.0.6/1a

DDSN Interactive cm3 Acora CMS 6.0.6/1a, 6.0.2/1a, 5.5.7/12b, 5.5.0/1b-p1, and possibly other versions, allows remote malicious users to obtain sensitive information via a request to Admin/top.aspx.

Ddsn Cm3 Acora Content Management System 6.0.2/1a Ddsn Cm3 Acora Content Management System 5.5.7/12b Ddsn Cm3 Acora Content Management System 5.5.0/1b-p1 Ddsn Cm3 Acora Content Management System 6.0.6/1a

1 EDB exploit

Multiple cross-site scripting (XSS) vulnerabilities in Admin/login/default.asp in DDSN Interactive cm3 Acora CMS 6.0.6/1a, 6.0.2/1a, 5.5.7/12b, 5.5.0/1b-p1, and possibly other versions allow remote malicious users to inject arbitrary web script or HTML via the (1) username, (2) u...

Ddsn Cm3 Acora Content Management System 6.0.2/1a Ddsn Cm3 Acora Content Management System 5.5.7/12b Ddsn Cm3 Acora Content Management System 5.5.0/1b-p1 Ddsn Cm3 Acora Content Management System 6.0.6/1a

DDSN Interactive cm3 Acora CMS 6.0.6/1a, 6.0.2/1a, 5.5.7/12b, 5.5.0/1b-p1, and possibly other versions, does not include the HTTPOnly flag in a Set-Cookie header for an unspecified cookie, which makes it easier for remote malicious users to obtain potentially sensitive informatio...

Ddsn Cm3 Acora Content Management System 6.0.2/1a Ddsn Cm3 Acora Content Management System 5.5.7/12b Ddsn Cm3 Acora Content Management System 5.5.0/1b-p1 Ddsn Cm3 Acora Content Management System 6.0.6/1a

Cross-site request forgery (CSRF) vulnerability in DDSN Interactive cm3 Acora CMS 6.0.6/1a, 6.0.2/1a, 5.5.7/12b, 5.5.0/1b-p1, and possibly other versions, allows remote malicious users to hijack the authentication of unspecified victims via unknown vectors.

Ddsn Cm3 Acora Content Management System 6.0.2/1a Ddsn Cm3 Acora Content Management System 5.5.7/12b Ddsn Cm3 Acora Content Management System 5.5.0/1b-p1 Ddsn Cm3 Acora Content Management System 6.0.6/1a

DDSN Interactive cm3 Acora CMS 6.0.6/1a, 6.0.2/1a, 5.5.7/12b, 5.5.0/1b-p1, and possibly other versions, allows remote malicious users to obtain sensitive information via a .. (dot dot) in the "l" parameter, which reveals the installation path in an error message.

Ddsn Cm3 Acora Content Management System 6.0.2/1a Ddsn Cm3 Acora Content Management System 5.5.7/12b Ddsn Cm3 Acora Content Management System 5.5.0/1b-p1 Ddsn Cm3 Acora Content Management System 6.0.6/1a

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook