vendor:
Clean CMS
by:
ZoRLu
8.8
CVSS
HIGH
Blind SQL & XSS
89, 79
CWE
Product Name: Clean CMS
Affected Version From: 1.5
Affected Version To: 1.5
Patch Exists: YES
Related CWE: N/A
CPE: a:4yoursite:clean_cms:1.5
Metasploit:
N/A
Other Scripts:
N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References:
N/A
Nuclei Metadata: N/A
Platforms Tested: N/A
2008
Clean CMS 1.5 Blind Sql & XSS Multiple Remote Vuln.
Clean CMS 1.5 is prone to multiple remote vulnerabilities, including blind SQL injection and cross-site scripting. An attacker can exploit these issues to execute arbitrary SQL commands in the context of the affected application, steal cookie-based authentication credentials, and launch other attacks. The demo URLs provided in the exploit code demonstrate the vulnerabilities.
Mitigation:
Upgrade to the latest version of Clean CMS 1.5 or apply the patch from the vendor.
