Description
SiteServer CMS v7.x, which SiteServer UI relies on, allows attackers to execute arbitrary code via a crafted plug-in.
Recommendation
No fix is available yet. Followings are affected versions:
- >= 7.0.0
References
Could your website be exposed too?
SmartScanner can check your website for RCE in SiteServer CMS and gives you actionable findings to investigate.
Start a free scanRelated Issues
- Uncontrolled Resource Consumption in Hawk - CVE-2022-29167
- Parsing issue in matrix-org/node-irc leading to room takeovers - CVE-2022-39203
- matrix-appservice-irc vulnerable to IRC mode parameter confusion - CVE-2022-39202
- secp256k1-js implements ECDSA without required r and s validation, leading to signature forgery - CVE-2022-41340
You might also like:
See something that needs correcting? Let us knowUpdated July 11, 2023