CVE-2015-4533

Related Files

OpenText Documentum Content Server SQL Injection

Posted Apr 25, 2017

Authored by Andrey B. Panfilov

OpenText Documentum Content Server has an inadequate protection mechanism against SQL injection, which allows remote authenticated users to execute arbitrary code with super-user privileges by leveraging the availability of the dm_bp_transition docbase method with a user-created dm_procedure object, as demonstrated by use of a backspace character in an injected string. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-2513. This code is a proof of concept exploit.

tags | exploit, remote, arbitrary, sql injection, proof of concept

advisories | CVE-2014-2513, CVE-2015-4533, CVE-2017-7221

SHA-256 | 075e41464f5a5b594ef398cfbdc839e338020d08e61a4d818296c681db42b4d7

Download | Favorite | View

EMC Documentum Content Server Privilege Escalation / Code Execution

Posted Aug 17, 2015

Site emc.com

EMC Documentum Content Server contains multiple vulnerabilities that could be exploited by malicious users to compromise the Content Server in several ways.

tags | advisory, vulnerability

advisories | CVE-2015-4531, CVE-2015-4532, CVE-2015-4533, CVE-2015-4534, CVE-2015-4535, CVE-2015-4536

SHA-256 | 95830881705d0d2408b47ceb7001260e614677f1858c088afc5e0922d3a4aee9

Download | Favorite | View