CVE-2005-3494

概要

参考情報

• lists.grok.org.uk/pipermail/full-disclosure/2005-October/038133.html · Vendor Advisory
• secunia.com/advisories/17307
• securitytracker.com/id · Exploit
• securityfocus.com/bid/15201

ar-blog のその他の脆弱性

• CVE-2006-2809中 6.8Multiple cross-site scripting (XSS) vulnerabilities in index.php in ar-blog 5.2 allow remote attackers to inject arbitrary web script or HTM…
• CVE-2006-1893中 6.8Cross-site scripting (XSS) vulnerability in print.php in ar-blog 5.2 allows remote attackers to inject arbitrary web script or HTML via the …
• CVE-2006-0333中 4.3Cross-site scripting (XSS) vulnerability in ar-blog 5.2 allows remote attackers to inject arbitrary web script or HTML via the (1) month or …
• CVE-2005-3495高 7.5Ar-blog 5.2 and earlier allows remote attackers to bypass authentication by modifying cookies.