ID de Prueba:	1.3.6.1.4.1.25623.1.0.106116
Categoría:	Web application abuses
Título:	dotCMS < 3.3.2 Multiple Vulnerabilities
Resumen:	dotCMS is prone to multiple vulnerabilities.
Descripción:	Summary: dotCMS is prone to multiple vulnerabilities. Vulnerability Insight: The following vulnerabilities exist: - CVE-2016-2355: SQL injection (SQLi) via the Content REST api if the api is set to allow for anonymous content saving (which is the shipped default). - CVE-2016-3688: SQL injection (SQLi) allows remote administrators to execute arbitrary SQL commands via the c0-e3 parameter to dwr/call/plaincall/UserAjax.getUsersList.dwr. - CVE-2016-3971: Cross-site scripting (XSS) in lucene_search.jsp allows remote authenticated administrators to inject arbitrary web script or HTML via the query parameter to c/portal/layout. - CVE-2016-3972: Directory traversal in the dotTailLogServlet allows remote authenticated administrators to read arbitrary files via a .. (dot dot) in the fileName parameter. - CVE-2016-4040: SQL injection (SQLi) in the Workflow Screen allows remote administrators to execute arbitrary SQL commands via the orderby parameter. - CVE-2016-4803: CRLF injection in the send email functionality allows remote attackers to inject arbitrary email headers via CRLF sequences in the subject. Vulnerability Impact: An attacker may access sensitive information in the dotcms database. Affected Software/OS: dotCMS version 3.3.1 and prior. Solution: Update to version 3.3.2 or later. CVSS Score: 7.5 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2016-2355 BugTraq ID: 94992 http://www.securityfocus.com/bid/94992 Common Vulnerability Exposure (CVE) ID: CVE-2016-3688 http://seclists.org/fulldisclosure/2016/Apr/5 http://seclists.org/fulldisclosure/2016/Apr/11 http://packetstormsecurity.com/files/136548/DotCMS-3.3-SQL-Injection.html Common Vulnerability Exposure (CVE) ID: CVE-2016-3971 http://seclists.org/fulldisclosure/2016/Apr/37 Common Vulnerability Exposure (CVE) ID: CVE-2016-3972 http://seclists.org/fulldisclosure/2016/Apr/36 Common Vulnerability Exposure (CVE) ID: CVE-2016-4040 Common Vulnerability Exposure (CVE) ID: CVE-2016-4803 BugTraq ID: 91529 http://www.securityfocus.com/bid/91529 http://seclists.org/fulldisclosure/2016/May/69 https://security.elarlang.eu/cve-2016-4803-dotcms-email-header-injection-vulnerability-full-disclosure.html
Copyright	Copyright (C) 2016 Greenbone AG

Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.