IT Security Stack Exchange
IT Security Stack Exchange

Questions tagged [cms]

A Content Management System (CMS) is a platform used to build websites that are easily edited by multiple users.

CMS is an acronym for Content Management System. A CMS is a platform used to build websites that are easily edited by multiple users, without requiring large amounts of expertise in web development.

These platforms can also

  • extend their functionality through plugins for calendars, blogs, galleries and more
  • allow novice users to modify content through the use of editors similar to word processors
  • handle user access for viewing, modifying and promoting content
29 questions
1
vote
0 answers

Reusing content-encryption key in cms enveloped data

OpenSSL keeps the structure CMS_ContentInfo opaque and in the case of enveloped data generates and manages the content-encryption key completely by itself. It is not possible to provide a content-encryption key generated by yourself. In contrast to…
phlipsy
  • 111
  • 1
1
vote
2 answers

How to encode a CMS or S/MIME PEM file with OpenSSL not encrypted or digitally signed?

We developed an application that reads a CMS encoded PEM file with this command: $ openssl cms -verify -in filepath -inform PEM -noverify The file is digitally signed, but we don't care about it, as we only want to extract the contents inside (it…
pragmatic_programmer
  • 113
  • 4
1
vote
0 answers

Magento site hacked by unknown vulnerability

Home page of my Magento site is hacked. A hacker put his javascript and html code in design/head/includes of table core_config_data. Somehow he updated value of design/head/includes from NULL to his script that's why home page of the site is showing…
Derek
  • 79
  • 1
  • 6
1
vote
1 answer

What are the only possible cases for DB injection?

After reading a bit on DB injections (injecting malicious query code written in SQL, NoSQL, or of any DB querying language), I understand that there are only 3 possible cases for this kind of attack: When no Transform-To-Pure-Text mechanism is…
user123574
1
vote
1 answer

Having http site load https content - Approach

My website is an information only website and all the information on it is available to all those who visit the website. There is no sensitive data and no user sessions\logins. The content on my http site is available over both http and https. All…
Chillax
  • 151
  • 5
1
vote
1 answer

Logout CSRF Protection

I am making a CMS and I have a CSRF protection in settings, new article. Should I also put this protection in the logout ?
Thomas Wilson
  • 11
  • 1
1
vote
1 answer

Trying to get a grasp of approximate risk level of CMS admin logins over http

Forgive me for a potentially obvious question--and I know the safe answer is "Always use https!"--but I'm trying to get a grasp on how necessary it is to use https for anyone accessing the backend on CMSes like Drupal, WP, etc. I was wondering if…
rrr45
  • 13
  • 2
0
votes
0 answers

Strip CMS Signature from file (using openssl?)

I have a lot of binary files that contain some data that is signed using CMS. The files have the form: $ openssl cms -inform DER -in test.cms -cmsout -print CMS_ContentInfo: contentType: pkcs7-signedData (1.2.840.113549.1.7.2) d.signedData: …
Niklas
  • 73
  • 7
0
votes
1 answer

MongoDB NoSQLi in Cockpit CMS - use of $func?

Please explain how this recent Cockpit CMS exploit works, specifically using the $func operator of the MongoLite library, in more detail. How does it exactly make the PHP code behave? As I understand it, the PHP code uses MongoLite to connect to…
Nils Deschrijver
  • 1
  • 1
0
votes
1 answer

OpenSSL: how to get matching subject_hash from a CMS SignerInfo?

So OpenSSL can calculate a hash value for X509 certificates that uniquely identifies this certificate: https://www.openssl.org/docs/man1.0.2/man1/x509.html (argument -hash or -subject_hash) now, if I have a CMS file…
matthias_buehlmann
  • 565
  • 4
  • 12
0
votes
1 answer

LFI to RCE through User-Agent

I'm doing a pentest on a FreeBSD machine running CuppaCMS. Already managed to login into the CMS with admin privilege, but it only takes me to a manager menu, with some options to change some tables and stuff like that, no RCE visible escalation. So…
mat80n2012 cerqueira
  • 3
  • 3
0
votes
1 answer

what can you do in sql login details and encryption key is available

I am practicing pen testing in a protected box and I have a vulnerable Magento website and I managed to get its MySQL config file which is app/etc/local.xml. In this file there is information such as: …
Danny
  • 121
  • 5
0
votes
2 answers

Full protection from shell-script injections (like a "Bash injection") - Is it even possible?

Assume there's a website built with some FOSS CMS (like Drupal) and the websites' directory is owned and grouped by root (instead www-data as common in Apache in Nginx) and a friend of the site's owner mistakenly sees that and tells the…
user123574
0
votes
2 answers

Prestashop + mod_security concerns

Running a shared hosting service, a client contacted me if I could disable mod_security for their webapp. The thing is, there is this patchwork webshop CMS called Prestashop with some hair-raising solutions (I'm not here to complain about that), and…
Rápli András
  • 2,124
  • 11
  • 24
1
2