CVE-2004-1607

概要

参考情報

• archives.neohapsis.com/archives/fulldisclosure/2004-10/0661.html
• marc.info
• secunia.com/advisories/12883 · Patch
• securitytracker.com/id
• osvdb.org/10944
• securityfocus.com/bid/11450 · Exploit
• exchange.xforce.ibmcloud.com/vulnerabilities/17751

saleslogix のその他の脆弱性

• CVE-2004-1612中 5.0Directory traversal vulnerability in SalesLogix 6.1 allows remote attackers to upload arbitrary files via a .. (dot dot) in a ProcessQueueFi…
• CVE-2004-1611中 5.1SalesLogix 6.1 does not verify if a user is authenticated before performing sensitive operations, which could allow remote attackers to (1) …
• CVE-2004-1610高 7.5SalesLogix 6.1 uses client-specified pathnames for writing certain files, which might allow remote authenticated users to create arbitrary f…
• CVE-2004-1609中 5.0SalesLogix 6.1 includes usernames, passwords, and other sensitive information in the headers of an HTTP response, which could allow remote a…
• CVE-2004-1608高 7.5SQL injection vulnerability in SalesLogix 6.1 allows remote attackers to execute arbitrary SQL statements via the id parameter in a view ope…