Cross-Site Scripting Vulnerabilities in Saurus CMS Community Edition
CVE-2015-0876

Currently unrated

Key Information:

Vendor

Saurus

Status
Saurus Cms
Vendor
CVE Published:
7 April 2015

What is CVE-2015-0876?

Saurus CMS Community Edition prior to version 4.7 contains multiple vulnerabilities in the print_language_selectbox function found in classes/adminpage.inc.php. These vulnerabilities can be exploited by remote attackers to inject arbitrary web scripts or HTML through unspecified vectors, posing significant risks to web application integrity and user security.

References

http://jvndb.jvn.jp/jvndb/JVNDB-2015-000017
third-party-advisoryx_refsource_JVNDB
http://jvn.jp/en/jp/JVN18387086/index.html
third-party-advisoryx_refsource_JVN
https://github.com/sauruscms/Saurus-CMS-Community-Edition...
x_refsource_CONFIRM

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.