Questions tagged [cms]

A Content Management System (CMS) is a platform used to build websites that are easily edited by multiple users.

Filter by
Sorted by
Tagged with
0 votes
0 answers
38 views

Strip CMS Signature from file (using openssl?)

I have a lot of binary files that contain some data that is signed using CMS. The files have the form: $ openssl cms -inform DER -in test.cms -cmsout -print CMS_ContentInfo: contentType: pkcs7-...
user avatar
  • 73
0 votes
1 answer
117 views

MongoDB NoSQLi in Cockpit CMS - use of $func?

Please explain how this recent Cockpit CMS exploit works, specifically using the $func operator of the MongoLite library, in more detail. How does it exactly make the PHP code behave? As I understand ...
user avatar
0 votes
1 answer
308 views

OpenSSL: how to get matching subject_hash from a CMS SignerInfo?

So OpenSSL can calculate a hash value for X509 certificates that uniquely identifies this certificate: https://www.openssl.org/docs/man1.0.2/man1/x509.html (argument -hash or -subject_hash) now, if I ...
user avatar
1 vote
0 answers
71 views

Reusing content-encryption key in cms enveloped data

OpenSSL keeps the structure CMS_ContentInfo opaque and in the case of enveloped data generates and manages the content-encryption key completely by itself. It is not possible to provide a content-...
user avatar
  • 111
0 votes
1 answer
1k views

LFI to RCE through User-Agent

I'm doing a pentest on a FreeBSD machine running CuppaCMS. Already managed to login into the CMS with admin privilege, but it only takes me to a manager menu, with some options to change some tables ...
user avatar
3 votes
0 answers
2k views

Openssl cms verify signature with timestamp and crl

I've used OpenSSL cms to sign the data and generate a detached signature. As per my requirements, I need to timestamp the signature as well, so that if the certificate expired, verification of ...
user avatar
  • 715
1 vote
2 answers
975 views

How to encode a CMS or S/MIME PEM file with OpenSSL not encrypted or digitally signed?

We developed an application that reads a CMS encoded PEM file with this command: $ openssl cms -verify -in filepath -inform PEM -noverify The file is digitally signed, but we don't care about it, as ...
user avatar
0 votes
1 answer
101 views

what can you do in sql login details and encryption key is available

I am practicing pen testing in a protected box and I have a vulnerable Magento website and I managed to get its MySQL config file which is app/etc/local.xml. In this file there is information such as:...
user avatar
  • 121
2 votes
2 answers
206 views

Do vBulletin and similar discussion forum CMS store previous email address and password hash in database?

I am in the process of De-Googling myself and setting complex passwords. I changed my registered Gmail to an alternative mail provider I changed my password to a complex one I use mostly vBulletin ...
user avatar
  • 1,413
3 votes
1 answer
228 views

How to protect a website from DDoS without a CDN? [closed]

I have basic knowledge in Bash and with that knowledge I rented a remote machine in a mostly-self-managed hosting platform (DigitalOcean) and raised a LEMP environment on which I have a website. I ...
user avatar
4 votes
1 answer
136 views

Potential risks of a single codebase for multiple CMSes

We are currently in the process of converting our multiple codebases (which are exactly the same, except for a configuration file and 2 stylesheets). We have been thinking about this for a while, and ...
user avatar
6 votes
2 answers
1k views

How to ensure that our production environment deployment process is PCI-compliant when we need to perform live code updates?

In planning the next phase of our platform, I am trying to ensure that the production deployment process is PCI compliant. We have a central platform which acts as a CMS, serving custom content based ...
user avatar
  • 161
1 vote
0 answers
58 views

Magento site hacked by unknown vulnerability [duplicate]

Home page of my Magento site is hacked. A hacker put his javascript and html code in design/head/includes of table core_config_data. Somehow he updated value of design/head/includes from NULL to his ...
user avatar
  • 79
2 votes
1 answer
81 views

Can a CMS generated HTML Document from an admin be considered trusted, and not vulnerable to XSS?

Currently, I am working on a CMS/Framework I developed that is similar to Wordpress, in that it is a platform for admins to create/post content for users. I am saving the HTML that is generated by ...
user avatar
0 votes
2 answers
421 views

Full protection from shell-script injections (like a "Bash injection") - Is it even possible?

Assume there's a website built with some FOSS CMS (like Drupal) and the websites' directory is owned and grouped by root (instead www-data as common in Apache in Nginx) and a friend of the site's ...
user avatar
0 votes
2 answers
2k views

Prestashop + mod_security concerns

Running a shared hosting service, a client contacted me if I could disable mod_security for their webapp. The thing is, there is this patchwork webshop CMS called Prestashop with some hair-raising ...
user avatar
1 vote
1 answer
226 views

What are the only possible cases for DB injection?

After reading a bit on DB injections (injecting malicious query code written in SQL, NoSQL, or of any DB querying language), I understand that there are only 3 possible cases for this kind of attack: ...
user avatar
1 vote
1 answer
2k views

Having http site load https content - Approach

My website is an information only website and all the information on it is available to all those who visit the website. There is no sensitive data and no user sessions\logins. The content on my http ...
user avatar
  • 151
1 vote
1 answer
555 views

Logout CSRF Protection [duplicate]

I am making a CMS and I have a CSRF protection in settings, new article. Should I also put this protection in the logout ?
user avatar
4 votes
0 answers
145 views

Detect malicious content on enourmous multi-site CMS [closed]

My Goal: My hope is to catch pages and content that would be flagged by Google Safe Browsing or others like it, except more proactive than waiting for a crawl by Google or being added to a ...
user avatar
  • 66
1 vote
1 answer
110 views

Trying to get a grasp of approximate risk level of CMS admin logins over http

Forgive me for a potentially obvious question--and I know the safe answer is "Always use https!"--but I'm trying to get a grasp on how necessary it is to use https for anyone accessing the backend on ...
user avatar
  • 13
1 vote
1 answer
163 views

Ghost CMS abnormal access

I have a blog hosted with Ghost CMS. I created a new blog post (say "My New Blog") and correspondingly there was a url generated (mysite.com/mynewblog/) The weird part is that I saw an access to this ...
user avatar
  • 1,136
2 votes
3 answers
835 views

Where is the most secure location to host an admin panel?

I have an admin panel on my site, that enables me to control the content on my website. In order for the admin panel to achieve this, I must have a connection to the site's database. I have two ...
user avatar
  • 163
4 votes
1 answer
1k views

Root server hacked via httpd - consequences and future prevention

Since before mid 2014, my root server was targeted by hackers and recently they gained limited access. I disabled all services once I realized the server has been compromised and started investigating....
user avatar
  • 303
1 vote
0 answers
91 views

How to anonymize contributors while still keeping attribution?

Imagine a CMS with authentication where the author of each article has to be stored in the database. Now I want to make it harder to analyze (by crawling or stealing the database) who has written ...
user avatar
  • 631
4 votes
2 answers
406 views

Does HTTP Digest Auth provide any increased security in this scenario?

Say I have a website running a popular CMS like Wordpress only over SSL through HTTP Strict Transport Security. Prior, the backend administrator login page could be accessed by anybody simply by ...
user avatar
5 votes
1 answer
5k views

Using client certificates for website authentication

I was wondering if there currently exists a Content Management System that supports PKI and client certificates for website authentication instead of username/passwords. If not, what's a good place to ...
user avatar
1 vote
1 answer
812 views

Detecting SMIME type using OpenSSL CMS

Is it possible to detect S/MIME content types (enveloped or signed) using OpenSSL CMS API? I would prefer to avoid pre-parsing S/MIME headers and let OpenSSL to detect whether message is signed or ...
user avatar
4 votes
3 answers
3k views

Techniques for fingerprinting a web based content management system (CMS)

Let's say we have a random basic blog or informational website: just some pages with information, a sidebar with an overview of the archives, the normal stuff. We know of this website that it's built ...
user avatar