CVE-2006-6417

Description

References

• secunia.com/advisories/23346
• securityreason.com/securityalert/2006
• securityfocus.com/archive/1/452998/100/100/threaded
• securityfocus.com/bid/21332 · Exploit
• vupen.com/english/advisories/2006/4938
• exchange.xforce.ibmcloud.com/vulnerabilities/30580
• tiifp.org/tarkus/advisories/b2evolution111106_01.txt

Weitere Schwachstellen in b2evolution

• CVE-2022-30935KRITISCH 9.1An authorization bypass in b2evolution allows remote, unauthenticated attackers to predict password reset tokens for any user through the us…
• CVE-2021-28242HOCH 8.8SQL Injection in the "evoadm.php" component of b2evolution v7.2.2-stable allows remote attackers to obtain sensitive database information by…
• CVE-2020-22841MITTEL 4.8Stored XSS in b2evolution CMS version 6.11.6 and prior allows an attacker to perform malicious JavaScript code execution via the plugin name…
• CVE-2020-22840MITTEL 6.1Open redirect vulnerability in b2evolution CMS version prior to 6.11.6 allows an attacker to perform malicious open redirects to an attacker…
• CVE-2016-8901KRITISCH 9.8b2evolution 6.7.6 suffer from an Object Injection vulnerability in /htsrv/call_plugin.php.