CVE-2008-2196

Description

References

• secunia.com/advisories/30092 · Vendor Advisory
• securityreason.com/securityalert/3879
• securityfocus.com/archive/1/491600/100/0/threaded
• securityfocus.com/bid/29050 · Exploit
• exchange.xforce.ibmcloud.com/vulnerabilities/42228

Altre vulnerabilità di lifetype

• CVE-2011-3751MEDIO 5.0LifeType 1.2.10 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation …
• CVE-2008-2178MEDIO 4.3Cross-site scripting (XSS) vulnerability in admin.php in LifeType 1.2.7 allows remote attackers to inject arbitrary web script or HTML via t…
• CVE-2007-0979MEDIO 5.0Unspecified vulnerability in LifeType before 1.1.6, and 1.2 before 1.2-beta2, allows remote attackers to obtain sensitive information (file …
• CVE-2006-6112MEDIO 5.0LifeType 1.0.x and 1.1.x have insufficient access control for all of the PHP scripts under (1) class/ and (2) plugins/, which allows remote …
• CVE-2006-3577ALTO 7.5SQL injection vulnerability in index.php in LifeType 1.0.5 allows remote attackers to execute arbitrary SQL commands via the Date parameter …