CVE-2007-4365

Description

References

• osvdb.org/36479
• securityreason.com/securityalert/3021
• i-s-o.org/security.txt
• securityfocus.com/archive/1/476287/100/0/threaded
• exchange.xforce.ibmcloud.com/vulnerabilities/35992

Más vulnerabilidades de content management system

• CVE-2007-1966CRÍTICO 9.1Session fixation vulnerability in eXV2 CMS 2.0.4.3 and earlier allows remote attackers to hijack web sessions by setting the PHPSESSID cooki…
• CVE-2007-1965MEDIO 4.3Multiple cross-site scripting (XSS) vulnerabilities in eXV2 CMS 2.0.4.3 and earlier allow remote attackers to inject arbitrary web script or…
• CVE-2006-7080MEDIO 4.3Directory traversal vulnerability in the avatar upload feature in exV2 2.0.4.3 and earlier allows remote attackers to delete arbitrary files…
• CVE-2006-7079CRÍTICO 9.8Variable extraction vulnerability in include/common.php in exV2 2.0.4.3 and earlier allows remote attackers to overwrite arbitrary program v…
• CVE-2006-5030ALTO 7.5SQL injection vulnerability in modules/messages/index.php in exV2 2.0.4.3 and earlier allows remote authenticated users to execute arbitrary…