• info
• discussion
• exploit
• solution
• references

eXpandable Home Page CMS Multiple Access Validation Vulnerabilities

eXpandable Home Page CMS is prone to multiple access-validation vulnerabilities. These issues are due to a failure in the application to limit access to administrative sections of the application.

A successful exploit may allow an attacker to access potentially sensitive information and to execute arbitrary PHP code in the context of the webserver process.

This issue is reported to affect XHP CMS version 0.5; other versions may also be vulnerable.