dotCMS - Security | Elar Lang

CVE-2016-10007 and CVE-2016-10008 - 2 SQL injection vulnerabilities in dotCMS, blacklist defence bypass

2 SQL injection vulnerabilities in dotCMS. Related CVE list: CVE-2016-10007, CVE-2016-10008. Blacklist defence bypass.

more ...

Multiple SQL injection vulnerabilities in dotCMS (8x CVE Full Disclosure)

Multiple SQL injection vulnerabilities in dotCMS. Related CVE list: CVE-2016-8902, CVE-2016-8903, CVE-2016-8904, CVE-2016-8905, CVE-2016-8906, CVE-2016-8907, CVE-2016-8908, CVE-2016-4040.

more ...

CVE-2016-8600 dotCMS - CAPTCHA bypass by reusing valid code

CVE-2016-8600 dotCMS before version 3.6.0 allows attacker to programmatically reuse valid captcha code.

more ...

CVE-2016-4803 dotCMS - email header injection vulnerability (Full Disclosure)

CVE-2016-4803 Email Header Injection vulnerability in dotCMS framework allows attacker to send malicious emails using "valid" and "trusted" email server.

more ...