CVE-2005-2147

概要

参考情報

• secunia.com/advisories/15752 · Patch
• debian.org/security/2005/dsa-739
• hardened-php.net/advisory-012005.php · Patch
• securityfocus.com/bid/13990 · Patch

trac のその他の脆弱性

• CVE-2008-3328中 4.3Cross-site scripting (XSS) vulnerability in the wiki engine in Trac before 0.10.5 allows remote attackers to inject arbitrary web script or …
• CVE-2007-1406緊急 10.0Trac before 0.10.3.1 does not send a Content-Disposition HTTP header specifying an attachment in certain "unsafe" situations, which has unkn…
• CVE-2007-1405中 4.3Cross-site scripting (XSS) vulnerability in the "download wiki page as text" feature in Trac before 0.10.3.1, when Microsoft Internet Explor…
• CVE-2006-5878高 7.5Cross-site request forgery (CSRF) vulnerability in Edgewall Trac 0.10 and earlier allows remote attackers to perform unauthorized actions as…
• CVE-2006-3695中 6.8Trac before 0.9.6 does not disable the "raw" or "include" commands when providing untrusted users with restructured text (reStructuredText) …