CVEvulnerability
CVE-2015-1603
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2015-02-19
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-79
Description
Multiple cross-site scripting (XSS) vulnerabilities in Adminsystems CMS before 4.0.2 allow remote attackers to inject arbitrary web script or HTML via the (1) page parameter to index.php or (2) id parameter in a users_users action to asys/site/system.php.
Affected configurations
• adminsystems cms project adminsystems cms (<= 4.0.0)
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- http://packetstormsecurity.com/files/130394/Landsknecht-Adminsystems-CMS-4.0.1-CSRF-XSS-File-Upload.html packetstormsecurity.com
- http://seclists.org/fulldisclosure/2015/Feb/50 Exploit
- http://sroesemann.blogspot.de/2015/01/sroeadv-2015-14.html Exploit
- http://sroesemann.blogspot.de/2015/02/report-for-advisory-sroeadv-2015-14.html Exploit
- http://www.openwall.com/lists/oss-security/2015/02/13/11 Exploit
- http://www.openwall.com/lists/oss-security/2015/02/14/1 www.openwall.com
- http://www.openwall.com/lists/oss-security/2015/02/14/5 www.openwall.com
- http://www.securityfocus.com/bid/72605 Exploit
- https://github.com/kneecht/adminsystems/issues/1 Exploit
- https://github.com/kneecht/adminsystems/releases/tag/4.0.2 Patch
- http://packetstormsecurity.com/files/130394/Landsknecht-Adminsystems-CMS-4.0.1-CSRF-XSS-File-Upload.html packetstormsecurity.com
- http://seclists.org/fulldisclosure/2015/Feb/50 Exploit
- http://sroesemann.blogspot.de/2015/01/sroeadv-2015-14.html Exploit
- http://sroesemann.blogspot.de/2015/02/report-for-advisory-sroeadv-2015-14.html Exploit
- http://www.openwall.com/lists/oss-security/2015/02/13/11 Exploit
- http://www.openwall.com/lists/oss-security/2015/02/14/1 www.openwall.com
- http://www.openwall.com/lists/oss-security/2015/02/14/5 www.openwall.com
- http://www.securityfocus.com/bid/72605 Exploit
- https://github.com/kneecht/adminsystems/issues/1 Exploit
- https://github.com/kneecht/adminsystems/releases/tag/4.0.2 Patch