silverstripeCMS Improper Input Validation Vulnerability - CVE-2011-4962 - Vulnerability Database

silverstripeCMS Improper Input Validation Vulnerability - CVE-2011-4962

Medium

Reference: CVE-2011-4962

NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2011-4962

Title: silverstripeCMS Improper Input Validation Vulnerability

Overview:

code/sitefeatures/PageCommentInterface.php in SilverStripe 2.4.x before 2.4.6 might allow remote attackers to execute arbitrary code via a crafted cookie in a user comment submission which is not properly handled when it is deserialized.