CVE-2012-5357
CRITICALEktron Content Management System < 8.02 - Remote Code Execution via XSLT Script Execution
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2012-5357.
PoCs published by Metasploit, Rich Lundeen, juan vazquez, Nicolas, Gregoire, including Metasploit module exploits/windows/http/ektron_xslt_exec.
AI-analyzed exploit summary This Metasploit module exploits CVE-2012-5357 in Ektron CMS 8.02 by leveraging insecure XSLT processing to achieve remote code execution. It generates a malicious XSLT file that writes and executes a payload on the target system.
Description
Ektron Content Management System (CMS) before 8.02 SP5 uses the XslCompiledTransform class with enablescript set to true, which allows remote attackers to execute arbitrary code with NETWORK SERVICE privileges via crafted XSL data.
Exploits (2)
This Metasploit module exploits CVE-2012-5357 in Ektron CMS 8.02 by leveraging insecure XSLT processing to achieve remote code execution. It generates a malicious XSLT file that writes and executes a payload on the target system.
This Metasploit module exploits a vulnerability in Ektron CMS 8.02 (before SP5) by leveraging insecure XSLT processing to execute arbitrary code via C# script injection. It uses VirtualAlloc and CreateThread to execute shellcode, achieving remote code execution with NETWORK SERVICE privileges.
References (4)
Scores
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H