CVE-2006-0885

概要

参考情報

• myimei.com/security/2006-02-20/cutenews141addcommentforprotectedusernamesxss-attack.html
• secunia.com/advisories/18981 · Exploit
• osvdb.org/23400
• securityfocus.com/archive/1/425583
• securityfocus.com/bid/16740
• vupen.com/english/advisories/2006/0685
• exchange.xforce.ibmcloud.com/vulnerabilities/24835

cutenews のその他の脆弱性

• CVE-2020-5558高 8.8CuteNews 2.0.1 allows remote authenticated attackers to execute arbitrary PHP code via unspecified vectors.
• CVE-2020-5557中 6.1Cross-site scripting vulnerability in CuteNews 2.0.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
• CVE-2019-11447高 8.8An issue was discovered in CutePHP CuteNews 2.1.2. An attacker can infiltrate the server through the avatar upload process in the profile ar…
• CVE-2009-4250中 4.3Multiple cross-site scripting (XSS) vulnerabilities in CutePHP CuteNews 1.4.6 and UTF-8 CuteNews before 8b allow remote attackers to inject …
• CVE-2009-4249低 2.6Multiple cross-site scripting (XSS) vulnerabilities in CutePHP CuteNews 1.4.6, when register_globals is enabled and magic_quotes_gpc is disa…