Help Center

Version 2.0

• Email Support: Submit a Ticket

• Website Protection
• Latest Vulnerabilities

Related Articles

• Multiple Vulnerabilities in Translation Management 6.x-1.21
• Multiple Vulnerabilities in JS Calendar 1.5.1 and 1.5.4 for Joomla!
• Cross-Site Scripting Vulnerability in WPtouch Plug-in 1.9.19.4 and 1.9.20
• Multiple Vulnerabilities in Joomla! 1.6 and 1.6.1
• Cross-Site Scripting Vulnerability in Mojolicious 1.12
• Multiple Vulnerabilities in MediaWiki Versions Prior to 1.16.4
• Directory Traversal Vulnerability in WP Custom Pages 0.5.0.1

Updating LEPTON CMS from Multiple Vulnerabilities

LEPTON CMS is a free, open-source Content Management System.

Affected Application: Versions up to and including 1.1.3.

Issue: Multiple vulnerabilities were discovered in the Lipton application including Cross-Site Scripting, SQL Injection and Directory Traversal. These vulnerabilities could let attackers execute unintended commands, access unauthorized data, hijack user sessions, access or modify tables within the application's database, or redirect users to malicious sites.

Resolution: An update for LEPTON is available. For more information, visit the vendor's website: http://www.lepton-cms.org/posts/security-release-lepton-1.1.4-52.php.

This information was compiled using information in the National Vulnerability Database. For more information about this issue, see the summary for CVE-2012-0998, CVE-2012-0999, and CVE-2012-1000.

To learn more about cross-site scripting, see Cross-Site Scripting.

To learn more about SQL Injections, see Injection Flaws.

Website Protection Site Scanner scans for this vulnerability, and many more. To learn about Site Scanner, see Getting Started with Website Protection Site Scanner.

• Not helpful
• Somewhat helpful
• Helpful
• Very Helpful
• Solved my problem