CVE-2004-1825

概要

参考情報

• marc.info
• secunia.com/advisories/11140 · Exploit
• osvdb.org/4308
• osvdb.org/4665 · Exploit
• securityfocus.com/bid/9890 · Vendor Advisory
• exchange.xforce.ibmcloud.com/vulnerabilities/15499

mambo open source のその他の脆弱性

• CVE-2007-4203緊急 9.3Session fixation vulnerability in Mambo 4.6.2 CMS allows remote attackers to hijack web sessions by setting the Cookie parameter.
• CVE-2006-7202高 7.8The dofreePDF function in includes/pdf.php in Mambo 4.6.1 does not properly check access rights for database content, which allows remote at…
• CVE-2006-7150高 7.5Multiple SQL injection vulnerabilities in Mambo 4.6.x allow remote attackers to execute arbitrary SQL commands via the mcname parameter to (…
• CVE-2004-2072中 6.8Cross-site scripting (XSS) vulnerability in index.php for Mambo Open Source 4.6, and possibly earlier versions, allows remote attackers to e…
• CVE-2004-1692中 4.3Cross-site scripting (XSS) vulnerability in index.php in Mambo 4.5 (1.0.9) allows remote attackers to inject arbitrary web script or HTML vi…