CVE-2004-2297

概要

参考情報

• archives.neohapsis.com/archives/fulldisclosure/2004-06/0310.html
• secunia.com/advisories/11852 · Vendor Advisory
• osvdb.org/7002
• osvdb.org/7003 · Exploit
• securityfocus.com/archive/1/365865 · Exploit
• securityfocus.com/bid/10524 · Exploit
• exchange.xforce.ibmcloud.com/vulnerabilities/16409

php-nuke のその他の脆弱性

• CVE-2008-0461中 6.8SQL injection vulnerability in index.php in the Search module in PHP-Nuke 8.0 FINAL and earlier, when magic_quotes_gpc is disabled, allows r…
• CVE-2007-6376高 7.5Directory traversal vulnerability in autohtml.php in Francisco Burzi PHP-Nuke 8.0 allows remote attackers to include and execute arbitrary l…
• CVE-2007-5032中 5.1Cross-site request forgery (CSRF) vulnerability in admin.php in Francisco Burzi PHP-Nuke allows remote attackers to add administrative accou…
• CVE-2007-1061中 6.8SQL injection vulnerability in index.php in Francisco Burzi PHP-Nuke 8.0 Final and earlier, when the "HTTP Referers" block is enabled, allow…
• CVE-2007-0372高 7.5Multiple SQL injection vulnerabilities in Francisco Burzi PHP-Nuke 7.9 allow remote attackers to execute arbitrary SQL commands via (1) the …