CVE-2004-2072

概要

参考情報

• securityfocus.com/bid/9588 · Exploit
• systemsecure.org/advisories/ssadvisory06022004.php · Exploit
• exchange.xforce.ibmcloud.com/vulnerabilities/15062

mambo open source のその他の脆弱性

• CVE-2007-4203緊急 9.3Session fixation vulnerability in Mambo 4.6.2 CMS allows remote attackers to hijack web sessions by setting the Cookie parameter.
• CVE-2006-7202高 7.8The dofreePDF function in includes/pdf.php in Mambo 4.6.1 does not properly check access rights for database content, which allows remote at…
• CVE-2006-7150高 7.5Multiple SQL injection vulnerabilities in Mambo 4.6.x allow remote attackers to execute arbitrary SQL commands via the mcname parameter to (…
• CVE-2004-1692中 4.3Cross-site scripting (XSS) vulnerability in index.php in Mambo 4.5 (1.0.9) allows remote attackers to inject arbitrary web script or HTML vi…
• CVE-2004-1825中 4.3Cross-site scripting (XSS) vulnerability in index.php in Mambo Open Source 4.5 stable 1.0.3 and earlier allows remote attackers to inject ar…