vendor:
Content Management System
by:
Vulnerability Laboratory Research Team
4,1
CVSS
MEDIUM
Persistent Input Validation Web Vulnerability
79
CWE
Product Name: Content Management System
Affected Version From: 7.8.0.1
Affected Version To: 7.8.0.1
Patch Exists: YES
Related CWE: N/A
CPE: N/A
Metasploit:
N/A
Other Scripts:
N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References:
N/A
Nuclei Metadata: N/A
Platforms Tested: N/A
2013
Olat CMS 7.8.0.1 – Persistent Calender Web Vulnerability
A persistent input validation web vulnerability is detected in the Olat Content Management System v7.8.0.1 (b20130821-N1) web-application. The web vulnerability allows remote attackers to implement/inject own malicious script codes on application side of the online-service. The persistent web vulnerability is located in the `Calender` module. Remote attackers are able inject malicious script codes via the `title` value of the `calender` module. The execution of the malicious script code occurs in the `calender` module of the online-service. The request method to inject is POST and the attack vector is persistent.
Mitigation:
Update to the latest version of the Olat CMS
