Questions tagged [cms]
A Content Management System (CMS) is a platform used to build websites that are easily edited by multiple users.
29
questions
0
votes
0
answers
38
views
Strip CMS Signature from file (using openssl?)
I have a lot of binary files that contain some data that is signed using CMS.
The files have the form:
$ openssl cms -inform DER -in test.cms -cmsout -print
CMS_ContentInfo:
contentType: pkcs7-...
- 73
0
votes
1
answer
117
views
MongoDB NoSQLi in Cockpit CMS - use of $func?
Please explain how this recent Cockpit CMS exploit works, specifically using the $func operator of the MongoLite library, in more detail. How does it exactly make the PHP code behave?
As I understand ...
0
votes
1
answer
308
views
OpenSSL: how to get matching subject_hash from a CMS SignerInfo?
So OpenSSL can calculate a hash value for X509 certificates that uniquely identifies this certificate:
https://www.openssl.org/docs/man1.0.2/man1/x509.html (argument -hash or -subject_hash)
now, if I ...
1
vote
0
answers
71
views
Reusing content-encryption key in cms enveloped data
OpenSSL keeps the structure CMS_ContentInfo opaque and in the case of enveloped data generates and manages the content-encryption key completely by itself. It is not possible to provide a content-...
- 111
0
votes
1
answer
1k
views
LFI to RCE through User-Agent
I'm doing a pentest on a FreeBSD machine running CuppaCMS. Already managed to login into the CMS with admin privilege, but it only takes me to a manager menu, with some options to change some tables ...
3
votes
0
answers
2k
views
Openssl cms verify signature with timestamp and crl
I've used OpenSSL cms to sign the data and generate a detached signature. As per my requirements, I need to timestamp the signature as well, so that if the certificate expired, verification of ...
- 715
1
vote
2
answers
975
views
How to encode a CMS or S/MIME PEM file with OpenSSL not encrypted or digitally signed?
We developed an application that reads a CMS encoded PEM file with this command:
$ openssl cms -verify -in filepath -inform PEM -noverify
The file is digitally signed, but we don't care about it, as ...
0
votes
1
answer
101
views
what can you do in sql login details and encryption key is available
I am practicing pen testing in a protected box and I have a vulnerable Magento website and I managed to get its MySQL config file which is app/etc/local.xml.
In this file there is information such as:...
- 121
2
votes
2
answers
206
views
Do vBulletin and similar discussion forum CMS store previous email address and password hash in database?
I am in the process of De-Googling myself and setting complex passwords.
I changed my registered Gmail to an alternative mail provider
I changed my password to a complex one
I use mostly vBulletin ...
- 1,413
3
votes
1
answer
228
views
How to protect a website from DDoS without a CDN? [closed]
I have basic knowledge in Bash and with that knowledge I rented a remote machine in a mostly-self-managed hosting platform (DigitalOcean) and raised a LEMP environment on which I have a website.
I ...
- 443
4
votes
1
answer
136
views
Potential risks of a single codebase for multiple CMSes
We are currently in the process of converting our multiple codebases (which are exactly the same, except for a configuration file and 2 stylesheets).
We have been thinking about this for a while, and ...
- 43
6
votes
2
answers
1k
views
How to ensure that our production environment deployment process is PCI-compliant when we need to perform live code updates?
In planning the next phase of our platform, I am trying to ensure that the production deployment process is PCI compliant.
We have a central platform which acts as a CMS, serving custom content based ...
- 161
1
vote
0
answers
58
views
Magento site hacked by unknown vulnerability [duplicate]
Home page of my Magento site is hacked. A hacker put his javascript and html code in design/head/includes of table core_config_data. Somehow he updated value of design/head/includes from NULL to his ...
- 79
2
votes
1
answer
81
views
Can a CMS generated HTML Document from an admin be considered trusted, and not vulnerable to XSS?
Currently, I am working on a CMS/Framework I developed that is similar to Wordpress, in that it is a platform for admins to create/post content for users.
I am saving the HTML that is generated by ...
- 23
0
votes
2
answers
421
views
Full protection from shell-script injections (like a "Bash injection") - Is it even possible?
Assume there's a website built with some FOSS CMS (like Drupal) and the websites' directory is owned and grouped by root (instead www-data as common in Apache in Nginx) and a friend of the site's ...
user123574
0
votes
2
answers
2k
views
Prestashop + mod_security concerns
Running a shared hosting service, a client contacted me if I could disable mod_security for their webapp. The thing is, there is this patchwork webshop CMS called Prestashop with some hair-raising ...
- 2,124
1
vote
1
answer
226
views
What are the only possible cases for DB injection?
After reading a bit on DB injections (injecting malicious query code written in SQL, NoSQL, or of any DB querying language), I understand that there are only 3 possible cases for this kind of attack:
...
user123574
1
vote
1
answer
2k
views
Having http site load https content - Approach
My website is an information only website and all the information on it is available to all those who visit the website. There is no sensitive data and no user sessions\logins.
The content on my http ...
- 151
1
vote
1
answer
555
views
Logout CSRF Protection [duplicate]
I am making a CMS and I have a CSRF protection in settings, new article. Should I also put this protection in the logout ?
4
votes
0
answers
145
views
Detect malicious content on enourmous multi-site CMS [closed]
My Goal:
My hope is to catch pages and content that would be flagged by Google Safe Browsing or others like it, except more proactive than waiting for a crawl by Google or being added to a ...
- 66
1
vote
1
answer
110
views
Trying to get a grasp of approximate risk level of CMS admin logins over http
Forgive me for a potentially obvious question--and I know the safe answer is "Always use https!"--but I'm trying to get a grasp on how necessary it is to use https for anyone accessing the backend on ...
- 13
1
vote
1
answer
163
views
Ghost CMS abnormal access
I have a blog hosted with Ghost CMS. I created a new blog post (say "My New Blog") and correspondingly there was a url generated (mysite.com/mynewblog/)
The weird part is that I saw an access to this ...
- 1,136
2
votes
3
answers
835
views
Where is the most secure location to host an admin panel?
I have an admin panel on my site, that enables me to control the content on my website. In order for the admin panel to achieve this, I must have a connection to the site's database.
I have two ...
- 163
4
votes
1
answer
1k
views
Root server hacked via httpd - consequences and future prevention
Since before mid 2014, my root server was targeted by hackers and recently they gained limited access. I disabled all services once I realized the server has been compromised and started investigating....
- 303
1
vote
0
answers
91
views
How to anonymize contributors while still keeping attribution?
Imagine a CMS with authentication where the author of each article has to be stored in the database. Now I want to make it harder to analyze (by crawling or stealing the database) who has written ...
- 631
4
votes
2
answers
406
views
Does HTTP Digest Auth provide any increased security in this scenario?
Say I have a website running a popular CMS like Wordpress only over SSL through HTTP Strict Transport Security. Prior, the backend administrator login page could be accessed by anybody simply by ...
- 511
5
votes
1
answer
5k
views
Using client certificates for website authentication
I was wondering if there currently exists a Content Management System that supports PKI and client certificates for website authentication instead of username/passwords. If not, what's a good place to ...
- 511
1
vote
1
answer
812
views
Detecting SMIME type using OpenSSL CMS
Is it possible to detect S/MIME content types (enveloped or signed) using OpenSSL CMS API? I would prefer to avoid pre-parsing S/MIME headers and let OpenSSL to detect whether message is signed or ...
4
votes
3
answers
3k
views
Techniques for fingerprinting a web based content management system (CMS)
Let's say we have a random basic blog or informational website: just some pages with information, a sidebar with an overview of the archives, the normal stuff. We know of this website that it's built ...
user21287