CVE-2005-4302

概要

参考情報

• pridels0.blogspot.com/2005/12/ezdatabase-vuln.html
• secunia.com/advisories/18043
• osvdb.org/21796
• securityfocus.com/bid/15908 · Exploit
• vupen.com/english/advisories/2005/2942

ezdatabase のその他の脆弱性

• CVE-2007-0592中 6.8Cross-site scripting (XSS) vulnerability in EzDatabase 2.1.3 allows remote attackers to inject arbitrary web script or HTML via unspecified …
• CVE-2006-0315中 5.8index.php in EZDatabase before 2.1.2 does not properly cleanse the p parameter before constructing and including a .php filename, which allo…
• CVE-2006-0214高 7.5Eval injection vulnerability in ezDatabase 2.0 and earlier allows remote attackers to execute arbitrary PHP code via the db_id parameter to …
• CVE-2005-4304中 5.0index.php in ezDatabase 2.1.2 and earlier allows remote attackers to obtain sensitive information via an invalid cat_id parameter, which lea…
• CVE-2005-4303高 7.5SQL injection vulnerability in index.php for ezDatabase 2.1.2 and earlier allows remote attackers to execute arbitrary SQL commands via the …