CVE-2006-1420

概要

参考情報

• securityreason.com/securityalert/629
• osvdb.org/24254
• securityfocus.com/archive/1/428891/100/0/threaded
• securityfocus.com/bid/17239 · Exploit
• exchange.xforce.ibmcloud.com/vulnerabilities/25453

saphplesson のその他の脆弱性

• CVE-2009-2883中 6.8SQL injection vulnerability in admin/login.php in SaphpLesson 4.0, when magic_quotes_gpc is disabled, allows remote attackers to execute arb…
• CVE-2006-2835高 7.5SQL injection vulnerability in saphplesson 2.0 allows remote attackers to execute arbitrary SQL commands via the (1) forumid parameter in ad…
• CVE-2006-2279高 7.5Multiple SQL injection vulnerabilities in SaphpLesson 3.0 allow remote attackers to execute arbitrary SQL commands via (1) the Find paramete…
• CVE-2006-2278中 5.0SaphpLesson 3.0 does not initialize array variables, which allows remote attackers to obtain the full path via an non-array (1) hrow paramet…
• CVE-2006-1720中 4.3Cross-site scripting (XSS) vulnerability in search.php in SaphpLesson 3.0 allows remote attackers to inject arbitrary web script or HTML via…