CVE-2004-2670

概要

参考情報

• echo.or.id/adv/adv02-y3dips-2004.txt · Exploit
• secunia.com/advisories/12231 · Vendor Advisory
• securitytracker.com/id · Vendor Advisory
• securityfocus.com/archive/1/370855 · Exploit
• securityfocus.com/bid/10856 · Exploit
• securityfocus.com/bid/8506 · Exploit
• exchange.xforce.ibmcloud.com/vulnerabilities/13041

endonesia のその他の脆弱性

• CVE-2023-31753緊急 9.8SQL injection vulnerability in diskusi.php in eNdonesia 8.7, allows an attacker to execute arbitrary SQL commands via the "rid=" parameter.
• CVE-2010-3461高 7.5SQL injection vulnerability in the Publisher module in eNdonesia 8.4 allows remote attackers to execute arbitrary SQL commands via the artid…
• CVE-2008-3452中 6.8SQL injection vulnerability in the Calendar module in eNdonesia 8.4 allows remote attackers to execute arbitrary SQL commands via the loc_id…
• CVE-2007-3394高 7.5Multiple SQL injection vulnerabilities in eNdonesia 8.4 allow remote attackers to execute arbitrary SQL commands via the (1) artid parameter…
• CVE-2006-6874中 6.8Multiple cross-site scripting (XSS) vulnerabilities in friend.php in eNdonesia 8.4 allow remote attackers to inject arbitrary web script or …