Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Ektron Content Management System (CMS) before 8.02 SP5 uses the XslCompiledTransform class with enablescript set to true, which allows remote attackers to execute arbitrary code with NETWORK SERVICE privileges via crafted XSL data.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Ektron Content Management System 安全漏洞
Vulnerability Description
Ektron Content Management System（CMS）是美国Ektron公司的一套企业级Web内容管理系统（CMS）。该系统支持所见即所得编辑器、内容布局和拖拽操作等。 Ektron CMS 8.02 SP5之前版本中存在安全漏洞，该漏洞源于程序使用了XslCompiledTransform类，并将enablescript设置为true。远程攻击者可借助特制的XSL数据利用该漏洞以NETWORK SERVICE权限执行任意代码。
CVSS Information
N/A
Vulnerability Type
N/A