Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2020-23369PUBLISHED: 2021-05-10In YzmCMS 5.6, XSS was discovered in member/member_content/init.html via the SRC attribute of an IFRAME element because of using UEditor 1.4.3.3.
CVE-2020-23370PUBLISHED: 2021-05-10In YzmCMS 5.6, stored XSS exists via the common/static/plugin/ueditor/1.4.3.3/php/controller.php action parameter, which allows remote attackers to upload a swf file. The swf file can be injected with arbitrary web script or HTML.
CVE-2020-23371PUBLISHED: 2021-05-10Cross-site scripting (XSS) vulnerability in static/admin/js/kindeditor/plugins/multiimage/images/swfupload.swf in noneCms v1.3.0 allows remote attackers to inject arbitrary web script or HTML via the movieName parameter.
CVE-2020-23373PUBLISHED: 2021-05-10Cross-site scripting (XSS) vulnerability in admin/nav/add.html in noneCMS v1.3.0 allows remote authenticated attackers to inject arbitrary web script or HTML via the name parameter.
CVE-2020-23374PUBLISHED: 2021-05-10Cross-site scripting (XSS) vulnerability in admin/article/add.html in noneCMS v1.3.0 allows remote authenticated attackers to inject arbitrary web script or HTML via the name parameter.
0 Comments
Tweet This
User Rank: Ninja
10/23/2015 | 10:11:20 AM
To have succinct processes in place for hygiene that could be replicated on a regular basis you need the employee base to perform those actions and unfortunately many places are not equipped to do that. MSSP's wouldn't help in this regard because that isn't there MO but maybe there is another managed service that could.