CVE-2005-4367

概要

参考情報

• pridels0.blogspot.com/2005/11/drzes-hms-32-multiple-vuln.html
• pridels0.blogspot.com/2006/03/controlzx-hms-hosting-management.html
• osvdb.org/21193
• osvdb.org/24177
• securityfocus.com/bid/15630

drzes hms のその他の脆弱性

• CVE-2005-4366中 6.4Multiple SQL injection vulnerabilities in DRZES HMS 3.2 allow remote attackers to execute arbitrary SQL commands via the (1) plan_id paramet…
• CVE-2005-4137高 7.5SQL injection vulnerability in viewinvoice.php in DRZES HMS 3.2 allows remote attackers to execute arbitrary SQL commands via the invoiceID …
• CVE-2005-4136中 4.3Cross-site scripting (XSS) vulnerability in login.php in DRZES HMS 3.2 allows remote attackers to inject arbitrary web script or HTML via th…