CVE

Id
78335  
CVE No.
CVE-2015-1058  
Status
Candidate  
Description
Multiple cross-site scripting (XSS) vulnerabilities in AdaptCMS 3.0.3 allow remote attackers to inject arbitrary web script or HTML via the (1) data[Category][title] parameter to admin/categories/add, (2) data[Field][title] parameter to admin/fields/ajax_fields/, (3) name property in a basicInfo JSON object to admin/tools/create_theme, (4) data[Link][link_title] parameter to admin/links/links/add, or (5) data[ForumTopic][subject] parameter to forums/off-topic/new.  
Phase
Assigned (20150116)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
715266 78335 CVE-2015-1058 EXPLOIT-DB:35710  View
715267 78335 CVE-2015-1058 URL:http://www.exploit-db.com/exploits/35710  View
715268 78335 CVE-2015-1058 MISC:http://packetstormsecurity.com/files/129812/AdaptCMS-3.0.3-Cross-Site-Scripting.html  View
715269 78335 CVE-2015-1058 MISC:http://www.zeroscience.mk/en/vulnerabilities/ZSL-2015-5218.php  View
715270 78335 CVE-2015-1058 OSVDB:116716  View
715271 78335 CVE-2015-1058 URL:http://osvdb.org/show/osvdb/116716  View
715272 78335 CVE-2015-1058 OSVDB:116717  View
715273 78335 CVE-2015-1058 URL:http://osvdb.org/show/osvdb/116717  View
715274 78335 CVE-2015-1058 OSVDB:116718  View
715275 78335 CVE-2015-1058 URL:http://osvdb.org/show/osvdb/116718  View
715276 78335 CVE-2015-1058 OSVDB:116719  View
715277 78335 CVE-2015-1058 URL:http://osvdb.org/show/osvdb/116719  View
715278 78335 CVE-2015-1058 OSVDB:116720  View
715279 78335 CVE-2015-1058 URL:http://osvdb.org/show/osvdb/116720  View
715280 78335 CVE-2015-1058 XF:adaptcms-multiple-data-xss(99617)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
6821 JVNDB-2015-002141 Apple iOS および Apple TV の Podcasts コンポーネントにおける一意の識別子を取得される脆弱性 Apple iOS および Apple TV の Podcasts コンポーネントには、一意の識別子を取得される脆弱性が存在します。 CVE-2015-1110 78335 5 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-002141.html  View