CVE-2005-1715

概要

参考情報

• lostmon.blogspot.com/2005/05/topo-22-multiple-variable-fields-xss.html · Patch
• secunia.com/advisories/15325
• securitytracker.com/id
• osvdb.org/16699 · Exploit
• securityfocus.com/bid/13700 · Exploit
• securityfocus.com/bid/13701

topo のその他の脆弱性

• CVE-2006-3834中 5.0EJ3 TOPo 2.2.178 includes the password in cleartext in the ID field to index.php, which allows context-dependent attackers to obtain entry p…
• CVE-2006-3833中 5.0index.php in EJ3 TOPo 2.2.178 allows remote attackers to overwrite existing entries and establish new passwords for the overwritten entries …
• CVE-2006-3536高 7.5Direct static code injection vulnerability in code/class_db_text.php in EJ3 TOPo 2.2.178 and earlier allows remote attackers to execute arbi…
• CVE-2006-0984中 4.3Cross-site scripting (XSS) vulnerability in inc_header.php in EJ3 TOPo 2.2.178 allows remote attackers to inject arbitrary web script or HTM…
• CVE-2005-1716中 5.0TOPo 2.2 (2.2.178) stores data files in the data directory under the web document root with insufficient access control, which allows remote…