CVE-2016-8360
HighSummary
An issue was discovered in Moxa SoftCMS versions prior to 1.6 that allows a specially crafted URL request sent to the SoftCMS ASP Webserver to cause a double free condition. This can enable an attacker to modify memory locations and potentially lead to denial of service or execution of arbitrary code.
Risk Assessment
The organization may be exposed to attacks that could result in denial of service or unauthorized code execution, jeopardizing the integrity and availability of systems.
Recommendation
It is recommended to update Moxa SoftCMS to version 1.6 or later to mitigate this vulnerability and to monitor systems for unauthorized activities.
Other vulnerabilities in Moxa SoftCMS
See all- CVE-2016-9332High
An issue was discovered in Moxa SoftCMS versions prior to Version 1.6 related to improper input validation. An attacker could provide unexpected values, leading to program crashes or excessive resource consumption resulting in a denial-of-service condition.
- CVE-2016-9333Critical
An issue was discovered in Moxa SoftCMS versions prior to 1.6 related to improper input sanitization. A remote attacker may gain access to SoftCMS with administrator privileges through specially crafted input (SQL INJECTION).
- CVE-2016-5792Critical
SQL injection vulnerability in Moxa SoftCMS before version 1.5 allows remote attackers to execute arbitrary SQL commands via unspecified fields.
Original NVD description (English source)
An issue was discovered in Moxa SoftCMS versions prior to Version 1.6. A specially crafted URL request sent to the SoftCMS ASP Webserver can cause a double free condition on the server allowing an attacker to modify memory locations and possibly cause a denial of service or the execution of arbitrary code.