CVE-2002-0520

概要

参考情報

• online.securityfocus.com/archive/82/266705 · Vendor Advisory
• asp-nuke.com/news.asp
• ifrance.com/kitetoua/tuto/ASPNuke.txt
• iss.net/security_center/static/8829.php · Patch
• securityfocus.com/bid/4475 · Vendor Advisory

asp-nuke のその他の脆弱性

• CVE-2007-2892中 4.3Cross-site scripting (XSS) vulnerability in news.asp in ASP-Nuke 2.0.7 allows remote attackers to inject arbitrary web script or HTML via th…
• CVE-2006-7152高 8.5default.asp in ASP-Nuke Community 1.5 and earlier allows remote attackers to gain privileges by setting certain pseudo cookie values.
• CVE-2006-6070高 7.5SQL injection vulnerability in module/account/register/register.asp in ASP Nuke 0.80 and earlier allows remote attackers to execute arbitrar…
• CVE-2005-2066高 7.5SQL injection vulnerability in comment_post.asp in ASP Nuke 0.80 allows remote attackers to execute arbitrary SQL statements via the TaskID …
• CVE-2005-2065中 5.0HTTP response splitting vulnerability in language_select.asp in ASP Nuke 0.80 allows remote attackers to spoof web content and poison web ca…