CVE-2004-2656

概要

参考情報

• archives.neohapsis.com/archives/bugtraq/2004-12/0170.html · Vendor Advisory
• secunia.com/advisories/13491 · Patch
• osvdb.org/21874 · Exploit
• osvdb.org/21875 · Exploit
• securityfocus.com/bid/11993 · Patch
• slashcode.com/slash/04/12/20/1946225.shtml · Patch
• exchange.xforce.ibmcloud.com/vulnerabilities/18508

slashcode のその他の脆弱性

• CVE-2002-1748高 7.2Unknown vulnerability in Slash 2.1.x and 2.2 through 2.2.2, as used in Slashcode, allows remote authenticated users to gain access to arbitr…
• CVE-2002-1681中 6.8Cross-site scripting (XSS) vulnerability in Slashcode CVS releases June 17 through July 1 2002 allows remote attackers to execute arbitrary …
• CVE-2002-0292低 2.6Cross-site scripting vulnerability in Slash before 2.2.5, as used in Slashcode and elsewhere, allows remote attackers to steal cookies and a…
• CVE-2001-1535中 4.6Slashcode 2.0 creates new accounts with an 8-character random password, which could allow local users to obtain session ID's from cookies an…
• CVE-2000-1015高 7.5The default configuration of Slashcode before version 2.0 Alpha has a default administrative password, which allows remote attackers to gain…