CVE-2016-8360

published 2017-02-13

CVE-2016-8360: An issue was discovered in Moxa SoftCMS versions prior to Version 1.6. A specially crafted URL request sent to the SoftCMS ASP Webserver can cause a double…

high 8.1 CVSS 3.0

AV N AC H PR N UI N S U C H I H A H

An issue was discovered in Moxa SoftCMS versions prior to Version 1.6. A specially crafted URL request sent to the SoftCMS ASP Webserver can cause a double free condition on the server allowing an attacker to modify memory locations and possibly cause a denial of service or the execution of arbitrary code.

Affected

1 ranges

Vendor	Product	Version range	Fixed in
moxa	softcms	<= 1.5	—

CWE-415