{"vulnerability": "CVE-2017-1568", "sightings": [{"uuid": "a970ad15-4bcc-4ecb-95a3-466ef7773fd4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2017-15689", "type": "published-proof-of-concept", "source": "Telegram/IechzTJqEoGzyCNt3bqa1OsFAGBEn8a-qVqD1btrcdGoLD8", "content": "", "creation_timestamp": "2025-09-17T21:00:04.000000Z"}, {"uuid": "693987cd-4e26-4664-98df-ff916b1b18dc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2017-15686", "type": "seen", "source": "https://t.me/cibsecurity/17437", "content": "\u203c CVE-2017-15686 \u203c\n\nCrafter CMS Crafter Studio 3.0.1 is affected by: Cross Site Scripting (XSS), which allows remote attackers to steal users\u00e2\u20ac\u2122 cookies.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2020-12-09T07:31:59.000000Z"}, {"uuid": "f4e4b030-f993-4da6-a068-f662a0808a7e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2017-15680", "type": "seen", "source": "https://t.me/cibsecurity/17436", "content": "\u203c CVE-2017-15680 \u203c\n\nIn Crafter CMS Crafter Studio 3.0.1 an IDOR vulnerability exists which allows unauthenticated attackers to view and modify administrative data.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2020-12-09T07:31:55.000000Z"}, {"uuid": "830609e4-f055-45aa-b330-d98cce5910a3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2017-15684", "type": "seen", "source": "https://t.me/cibsecurity/17434", "content": "\u203c CVE-2017-15684 \u203c\n\nCrafter CMS Crafter Studio 3.0.1 has a directory traversal vulnerability which allows unauthenticated attackers to view files from the operating system.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2020-12-09T07:31:54.000000Z"}, {"uuid": "a8a984c4-b381-4367-a16b-d166e4a2ea99", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2017-15685", "type": "seen", "source": "https://t.me/cibsecurity/17432", "content": "\u203c CVE-2017-15685 \u203c\n\nCrafter CMS Crafter Studio 3.0.1 is affected by: XML External Entity (XXE). An unauthenticated attacker is able to create a site with specially crafted XML that allows the retrieval of OS files out-of-band.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2020-12-09T07:31:52.000000Z"}, {"uuid": "0a441289-98bc-4283-9de7-9e56fcd66736", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2017-15683", "type": "seen", "source": "https://t.me/cibsecurity/17444", "content": "\u203c CVE-2017-15683 \u203c\n\nIn Crafter CMS Crafter Studio 3.0.1 an unauthenticated attacker is able to create a site with specially crafted XML that allows the retrieval of OS files out-of-band.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2020-12-09T07:32:08.000000Z"}, {"uuid": "8c8d7555-7db7-41ab-ac75-cf46ef573363", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2017-15682", "type": "seen", "source": "https://t.me/cibsecurity/17443", "content": "\u203c CVE-2017-15682 \u203c\n\nIn Crafter CMS Crafter Studio 3.0.1 an unauthenticated attacker is able to inject malicious JavaScript code resulting in a stored/blind XSS in the admin panel.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2020-12-09T07:32:07.000000Z"}, {"uuid": "e3051f7d-3e3c-4d15-bfeb-e846b9baaeda", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2017-15682", "type": "seen", "source": "https://t.me/cibsecurity/16898", "content": "\u203c CVE-2017-15682 \u203c\n\nIn Crafter CMS Crafter Studio 3.0.1 an unauthenticated attacker is able to inject malicious JavaScript code resulting in a stored/blind XSS in the admin panel.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2020-11-27T20:50:18.000000Z"}, {"uuid": "9ff3cf49-4419-40a1-bd32-bd32f3e36b1f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2017-15681", "type": "seen", "source": "https://t.me/cibsecurity/17440", "content": "\u203c CVE-2017-15681 \u203c\n\nIn Crafter CMS Crafter Studio 3.0.1 a directory traversal vulnerability exists which allows unauthenticated attackers to overwrite files from the operating system which can lead to RCE.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2020-12-09T07:32:02.000000Z"}, {"uuid": "4de22a6e-6e78-4686-a3f4-657bf97db532", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2017-15685", "type": "seen", "source": "https://t.me/cibsecurity/16887", "content": "\u203c CVE-2017-15685 \u203c\n\nCrafter CMS Crafter Studio 3.0.1 is affected by: XML External Entity (XXE). An unauthenticated attacker is able to create a site with specially crafted XML that allows the retrieval of OS files out-of-band.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2020-11-27T20:50:02.000000Z"}, {"uuid": "c3a6297d-11c5-4a90-84b5-29338277ff39", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2017-15683", "type": "seen", "source": "https://t.me/cibsecurity/16899", "content": "\u203c CVE-2017-15683 \u203c\n\nIn Crafter CMS Crafter Studio 3.0.1 an unauthenticated attacker is able to create a site with specially crafted XML that allows the retrieval of OS files out-of-band.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2020-11-27T20:50:19.000000Z"}, {"uuid": "cdceb947-011b-4260-8e0f-0104d3cd347e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2017-15686", "type": "seen", "source": "https://t.me/cibsecurity/16892", "content": "\u203c CVE-2017-15686 \u203c\n\nCrafter CMS Crafter Studio 3.0.1 is affected by: Cross Site Scripting (XSS), which allows remote attackers to steal users\u00e2\u20ac\u2122 cookies.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2020-11-27T20:50:10.000000Z"}, {"uuid": "a3a5df98-9f28-4ed8-95ce-c91561e52c05", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2017-15680", "type": "seen", "source": "https://t.me/cibsecurity/16891", "content": "\u203c CVE-2017-15680 \u203c\n\nIn Crafter CMS Crafter Studio 3.0.1 an IDOR vulnerability exists which allows unauthenticated attackers to view and modify administrative data.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2020-11-27T20:50:09.000000Z"}, {"uuid": "50432c5f-191b-4400-9457-0a8d58ca8f2f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2017-15684", "type": "seen", "source": "https://t.me/cibsecurity/16889", "content": "\u203c CVE-2017-15684 \u203c\n\nCrafter CMS Crafter Studio 3.0.1 has a directory traversal vulnerability which allows unauthenticated attackers to view files from the operating system.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2020-11-27T20:50:07.000000Z"}, {"uuid": "0747f378-1e46-49d5-9cc1-c681903a278b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2017-15681", "type": "seen", "source": "https://t.me/cibsecurity/16895", "content": "\u203c CVE-2017-15681 \u203c\n\nIn Crafter CMS Crafter Studio 3.0.1 a directory traversal vulnerability exists which allows unauthenticated attackers to overwrite files from the operating system which can lead to RCE.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2020-11-27T20:50:15.000000Z"}]}