CVE-2005-3740

概要

参考情報

• myblog.it-security23.net/advisories/advisory-6.txt · Exploit
• seclists.org/lists/bugtraq/2005/Nov/0232.html · Exploit
• seclists.org/lists/bugtraq/2005/Nov/0237.html
• secunia.com/advisories/17664 · Patch
• osvdb.org/20991
• osvdb.org/20992
• securityfocus.com/bid/15502
• vupen.com/english/advisories/2005/2504

php fusion のその他の脆弱性

• CVE-2006-4673低 2.6Global variable overwrite vulnerability in maincore.php in PHP-Fusion 6.01.4 and earlier uses the extract function on the superglobals, whic…
• CVE-2006-3555中 5.8Multiple cross-site scripting (XSS) vulnerabilities in submit.php in PHP-Fusion before 6.01.3 allow remote attackers to inject arbitrary web…
• CVE-2006-2459中 6.4SQL injection vulnerability in messages.php in PHP-Fusion 6.00.307 and earlier allows remote authenticated users to execute arbitrary SQL co…
• CVE-2006-2331中 6.4Multiple directory traversal vulnerabilities in PHP-Fusion 6.00.306 allow remote attackers to include and execute arbitrary local files via …
• CVE-2006-2330中 6.4PHP-Fusion 6.00.306 and earlier, running under Apache HTTP Server 1.3.27 and PHP 4.3.3, allows remote authenticated users to upload files of…