CVE-2006-1072

概要

参考情報

• notlegal.ws/simplogsploit.txt · URL Repurposed
• securityfocus.com/archive/1/426769/100/0/threaded
• securityfocus.com/bid/16965
• exchange.xforce.ibmcloud.com/vulnerabilities/25066

simplog のその他の脆弱性

• CVE-2009-4093中 4.3Multiple cross-site scripting (XSS) vulnerabilities in comments.php in Simplog 0.9.3.2, and possibly earlier, allow remote attackers to inje…
• CVE-2009-4092中 6.8Cross-site request forgery (CSRF) vulnerability in user.php in Simplog 0.9.3.2, and possibly earlier, allows remote attackers to hijack the …
• CVE-2009-4091中 5.0comments.php in Simplog 0.9.3.2, and possibly earlier, does not properly restrict access, which allows remote attackers to edit or delete co…
• CVE-2006-5398高 7.5SQL injection vulnerability in comments.php in Simplog 0.9.3.1 allows remote attackers to execute arbitrary SQL commands via the cid paramet…
• CVE-2006-4058中 6.8Cross-site scripting (XSS) vulnerability in archive.php in Simplog 0.9.3 and earlier allows remote attackers to inject arbitrary web script …