CVE-2005-4357

概要

参考情報

• marc.info
• secunia.com/advisories/18125 · Vendor Advisory
• secunia.com/advisories/18252
• securityreason.com/achievement_securityalert/29
• securityreason.com/securityalert/269 · Exploit
• osvdb.org/21803
• phpbb.com/phpBB/viewtopic.php
• securityfocus.com/archive/1/420537/100/0/threaded
• vupen.com/english/advisories/2005/2991
• vupen.com/english/advisories/2006/0010

phpbb のその他の脆弱性

• CVE-2007-1695緊急 10.0PHP remote file inclusion vulnerability in includes/usercp_register.php in phpBB 2.0.19 allows remote attackers to execute arbitrary PHP cod…
• CVE-2006-2219中 5.0phpBB 2.0.20 does not verify user-specified input variable types before being passed to type-dependent functions, which allows remote attack…
• CVE-2006-6841緊急 10.0Certain forms in phpBB before 2.0.22 lack session checks, which has unknown impact and remote attack vectors.
• CVE-2006-6840緊急 10.0Unspecified vulnerability in phpBB before 2.0.22 has unknown impact and remote attack vectors related to a "negative start parameter."
• CVE-2006-6839緊急 10.0Unspecified vulnerability in phpBB before 2.0.22 has unknown impact and remote attack vectors related to "criteria for 'bad' redirection tar…