|
Academic Web Tools CMS 1.4.2.8 Multiple Input Validation Vulnerabilities
Academic Web Tools CMS is prone to multiple input-validation vulnerabilities: - A directory-traversal vulnerability - Multiple cross-site scripting vulnerabilities - An HTML-injection vulnerability - An SQL-injection vulnerability - Multiple session-fixation vulnerabilities Exploiting these issues could allow an attacker to steal cookie-based authentication credentials, compromise the application, gain unauthorized access to the affected application, access or modify data, execute arbitrary local scripts, retrieve potentially sensitive information, or exploit latent vulnerabilities in the underlying database. Academic Web Tools CMS 1.4.2.8 is vulnerable; other versions may also be affected. |
|
|
Privacy Statement |
