CVE-2004-1692

概要

参考情報

• mamboforge.net/frs/shownotes.php · Patch
• marc.info
• osvdb.org/10179 · Exploit
• securityfocus.com/bid/11220 · Exploit
• exchange.xforce.ibmcloud.com/vulnerabilities/20616

mambo open source のその他の脆弱性

• CVE-2007-4203緊急 9.3Session fixation vulnerability in Mambo 4.6.2 CMS allows remote attackers to hijack web sessions by setting the Cookie parameter.
• CVE-2006-7202高 7.8The dofreePDF function in includes/pdf.php in Mambo 4.6.1 does not properly check access rights for database content, which allows remote at…
• CVE-2006-7150高 7.5Multiple SQL injection vulnerabilities in Mambo 4.6.x allow remote attackers to execute arbitrary SQL commands via the mcname parameter to (…
• CVE-2004-2072中 6.8Cross-site scripting (XSS) vulnerability in index.php for Mambo Open Source 4.6, and possibly earlier versions, allows remote attackers to e…
• CVE-2004-1825中 4.3Cross-site scripting (XSS) vulnerability in index.php in Mambo Open Source 4.5 stable 1.0.3 and earlier allows remote attackers to inject ar…