CVE-2005-2600

概要

参考情報

• archives.neohapsis.com/archives/fulldisclosure/2005-08/0383.html · Patch
• secunia.com/advisories/16414 · Patch
• secunia.com/advisories/17643
• debian.org/security/2005/dsa-798
• debian.org/security/2005/dsa-899
• securityfocus.com/bid/14556

fudforum のその他の脆弱性

• CVE-2013-5309低 2.6Cross-site scripting (XSS) vulnerability in install/forum_data/src/custom_fields.inc.t in FUDforum 3.0.4.1 and earlier, when registering a n…
• CVE-2005-2781高 7.5The Avatar upload feature in FUD Forum before 2.7.0 does not properly verify uploaded files, which allows remote attackers to execute arbitr…
• CVE-2002-1423中 5.0tmp_view.php in FUDforum before 2.2.0 allows remote attackers to read arbitrary files via an absolute pathname in the file parameter.
• CVE-2002-1422中 5.0admbrowse.php in FUDforum before 2.2.0 allows remote attackers to create or delete files via URL-encoded pathnames in the cur and dest param…
• CVE-2002-1421高 7.5SQL injection vulnerabilities in FUDforum before 2.2.0 allow remote attackers to perform unauthorized database operations via (1) report.php…