CVE-2005-4171

概要

参考情報

• archives.neohapsis.com/archives/bugtraq/2005-11/0301.html · Exploit
• rgod.altervista.org/efiction2_xpl.html · Exploit
• secunia.com/advisories/17777 · Exploit
• securitytracker.com/id · Exploit
• efiction.wallflowergirl.com/forums/viewtopic.php
• osvdb.org/21124
• securityfocus.com/bid/15568 · Exploit

efiction のその他の脆弱性

• CVE-2005-4173中 5.0eFiction 1.0, 1.1, and 2.0 allows remote attackers to obtain sensitive information by accessing phpinfo.php, which executes the PHP phpinfo …
• CVE-2005-4172中 5.0eFiction 1.0, 1.1, and 2.0 allows remote attackers to obtain sensitive information via a direct request to storyblock.php without arguments,…
• CVE-2005-4170高 7.5SQL injection vulnerability in eFiction 1.1 allows remote attackers to execute arbitrary SQL commands via the uid parameter to viewuser.php.
• CVE-2005-4169高 7.5Multiple SQL injection vulnerabilities in eFiction 1.0 allow remote attackers to execute arbitrary SQL commands via the (1) let parameter in…
• CVE-2005-4168高 7.5Multiple SQL injection vulnerabilities in eFiction 1.0, 1.1, and 2.0 allow remote attackers to execute arbitrary SQL commands via (1) the le…