CVE-2005-2012

概要

参考情報

• marc.info
• gulftech.org · Exploit

pafaq のその他の脆弱性

• CVE-2005-2014中 4.6The "upload a language pack" feature in paFAQ 1.0 Beta 4 allows remote authenticated administrators to execute arbitrary PHP commands by upl…
• CVE-2005-2013中 5.0paFAQ 1.0 Beta 4 allows remote attackers to obtain sensitive information via a direct request to admin/backup.php, which contains a backup o…
• CVE-2005-2011中 4.3Multiple cross-site scripting (XSS) vulnerabilities in paFAQ 1.0 Beta 4 allow remote attackers to inject arbitrary web script or HTML, as de…
• CVE-2005-0475中 6.4SQL injection vulnerability in paFAQ Beta4, and possibly other versions, allows remote attackers to execute arbitrary SQL code via the (1) o…