CVE-2006-0894

概要

参考情報

• archives.neohapsis.com/archives/bugtraq/2006-02/0418.html · Exploit
• retrogod.altervista.org/noccw_10_incl_xpl.html
• secunia.com/advisories/16921 · Vendor Advisory
• securitytracker.com/id
• osvdb.org/23423
• osvdb.org/23424
• osvdb.org/23425
• osvdb.org/23426
• osvdb.org/23427
• securityfocus.com/bid/16793

nocc のその他の脆弱性

• CVE-2006-0895中 5.0NOCC Webmail 1.0 allows remote attackers to obtain the installation path via a direct request to html/header.php.
• CVE-2006-0893中 5.0NOCC Webmail 1.0 allows remote attackers to obtain sensitive information via a direct request to (1) the profiles directory, which leaks e-m…
• CVE-2006-0892高 7.5NOCC Webmail 1.0 stores e-mail attachments in temporary files with predictable filenames, which makes it easier for remote attackers to exec…
• CVE-2006-0891中 5.0Multiple directory traversal vulnerabilities in NOCC Webmail 1.0 allow remote attackers to include arbitrary files via .. (dot dot) sequence…
• CVE-2002-2343中 4.3Cross-site scripting (XSS) vulnerability in NOCC 0.9 through 0.9.5 allows remote attackers to inject arbitrary web script or HTML via email …