CVE-2004-2018

概要

参考情報

• archives.neohapsis.com/archives/fulldisclosure/2004-05/0870.html
• marc.info
• secunia.com/advisories/11625 · Exploit
• osvdb.org/6222
• securityfocus.com/bid/10365 · Exploit
• waraxe.us/index.php · Exploit
• exchange.xforce.ibmcloud.com/vulnerabilities/16218

php-nuke のその他の脆弱性

• CVE-2008-0461中 6.8SQL injection vulnerability in index.php in the Search module in PHP-Nuke 8.0 FINAL and earlier, when magic_quotes_gpc is disabled, allows r…
• CVE-2007-6376高 7.5Directory traversal vulnerability in autohtml.php in Francisco Burzi PHP-Nuke 8.0 allows remote attackers to include and execute arbitrary l…
• CVE-2007-5032中 5.1Cross-site request forgery (CSRF) vulnerability in admin.php in Francisco Burzi PHP-Nuke allows remote attackers to add administrative accou…
• CVE-2007-1061中 6.8SQL injection vulnerability in index.php in Francisco Burzi PHP-Nuke 8.0 Final and earlier, when the "HTTP Referers" block is enabled, allow…
• CVE-2007-0372高 7.5Multiple SQL injection vulnerabilities in Francisco Burzi PHP-Nuke 7.9 allow remote attackers to execute arbitrary SQL commands via (1) the …