CVE-2007-2898

Description

References

• osvdb.org/36569
• secunia.com/advisories/25336 · Vendor Advisory
• securityreason.com/securityalert/2752
• securityfocus.com/archive/1/469351/100/0/threaded
• vupen.com/english/advisories/2007/1923 · Vendor Advisory
• waraxe.us/advisory-51.html · Exploit
• exchange.xforce.ibmcloud.com/vulnerabilities/34471

Weitere Schwachstellen in 2z project

• CVE-2007-6661MITTEL 6.42z project 0.9.6.1 allows attackers to change the password without supplying the old password.
• CVE-2007-6660MITTEL 5.02z project 0.9.6.1 allows remote attackers to obtain sensitive information via (1) a request to index.php with an invalid template or (2) a …
• CVE-2007-6659MITTEL 4.3Multiple cross-site scripting (XSS) vulnerabilities in 2z project 0.9.6.1 allow remote attackers to inject arbitrary web script or HTML via …
• CVE-2007-2905HOCH 7.5SQL injection vulnerability in includes/rating.php in 2z Project 0.9.5 allows remote attackers to execute arbitrary SQL commands via the pos…