CVE-2005-4612

概要

参考情報

• pridels0.blogspot.com/2005/11/vubb-forum-sql-and-xss-vuln.html
• osvdb.org/21329 · Exploit
• osvdb.org/21330 · Exploit
• osvdb.org/21331 · Exploit
• exchange.xforce.ibmcloud.com/vulnerabilities/24350

vubb のその他の脆弱性

• CVE-2006-6231中 5.0vuBB 0.2.1 and earlier allows remote attackers to obtain sensitive information via a direct request to includes/vubb.php, which leaks the pa…
• CVE-2006-6230高 7.5SQL injection vulnerability in vuBB 0.2.1 and earlier allows remote attackers to execute arbitrary SQL commands via the user parameter in a …
• CVE-2006-0962高 7.5SQL injection vulnerability in vuBB 0.2 allows remote attackers to execute arbitrary SQL commands via the pass parameter in a cookie.
• CVE-2005-4613中 4.3Cross-site scripting (XSS) vulnerability in VUBB alpha rc1 allows remote attackers to inject arbitrary web script or HTML via unspecified fi…
• CVE-2005-3513中 5.0index.php in VUBB alpha rc1 allows remote attackers to obtain the installation path of the application via a viewforum action with the f par…