CVE-2005-4167

概要

参考情報

• archives.neohapsis.com/archives/bugtraq/2005-11/0301.html · Exploit
• rgod.altervista.org/efiction2_xpl.html · Exploit
• secunia.com/advisories/17777 · Exploit
• efiction.wallflowergirl.com/forums/viewtopic.php
• securityfocus.com/bid/15568 · Exploit

efiction のその他の脆弱性

• CVE-2005-4173中 5.0eFiction 1.0, 1.1, and 2.0 allows remote attackers to obtain sensitive information by accessing phpinfo.php, which executes the PHP phpinfo …
• CVE-2005-4172中 5.0eFiction 1.0, 1.1, and 2.0 allows remote attackers to obtain sensitive information via a direct request to storyblock.php without arguments,…
• CVE-2005-4171高 7.5The "Upload new image" command in the "Manage Images" eFiction 1.1, when members are allowed to upload images, allows remote attackers to ex…
• CVE-2005-4170高 7.5SQL injection vulnerability in eFiction 1.1 allows remote attackers to execute arbitrary SQL commands via the uid parameter to viewuser.php.
• CVE-2005-4169高 7.5Multiple SQL injection vulnerabilities in eFiction 1.0 allow remote attackers to execute arbitrary SQL commands via the (1) let parameter in…