CVE-2009-0672

Description

References

• osvdb.org/52298
• ravenphpscripts.com/postt17156.html
• securityfocus.com/archive/1/500988/100/0/threaded
• securityfocus.com/bid/33787 · Patch
• waraxe.us/advisory-72.html · Exploit
• exchange.xforce.ibmcloud.com/vulnerabilities/48791
• exploit-db.com/exploits/8068

Weitere Schwachstellen in ravennuke

• CVE-2009-0679MITTEL 4.3Cross-site scripting (XSS) vulnerability in the Your Account module in RavenNuke 2.30 allows remote attackers to inject arbitrary web script…
• CVE-2009-0678MITTEL 5.0images/captcha.php in RavenNuke 2.30 allows remote attackers to obtain sensitive information via an aFonts array parameter value that does n…
• CVE-2009-0677MITTEL 6.5avatarlist.php in the Your Account module, reached through modules.php, in Raven Web Services RavenNuke 2.30 allows remote authenticated use…
• CVE-2009-0674MITTEL 6.0images/captcha.php in Raven Web Services RavenNuke 2.30, when register_globals and display_errors are enabled, allows remote attackers to de…
• CVE-2009-0673MITTEL 6.5Eval injection vulnerability in the Custom Fields feature in the Your Account module in Raven Web Services RavenNuke 2.30 allows remote auth…