CVE-2006-1746

概要

参考情報

• downloads.securityfocus.com/vulnerabilities/exploits/PHPList-lfi.php · Exploit
• securitytracker.com/id
• tincan.co.uk
• securityfocus.com/archive/1/430475/30/30/threaded · Exploit
• securityfocus.com/archive/1/430597 · Patch
• securityfocus.com/archive/1/448411
• securityfocus.com/bid/17429 · Exploit
• vupen.com/english/advisories/2006/1296
• exchange.xforce.ibmcloud.com/vulnerabilities/25701

phplist のその他の脆弱性

• CVE-2012-5228中 4.3Cross-site scripting (XSS) vulnerability in admin/index.php in phplist 2.10.9, 2.10.17, and possibly other versions before 2.10.19 allows re…
• CVE-2011-1682中 4.3Multiple cross-site request forgery (CSRF) vulnerabilities in phpList 2.10.13 and earlier allow remote attackers to hijack the authenticatio…
• CVE-2011-0748中 6.8Multiple cross-site request forgery (CSRF) vulnerabilities in phpList before 2.10.13 allow remote attackers to hijack the authentication of …
• CVE-2009-0422高 7.5Dynamic variable evaluation vulnerability in lists/admin.php in phpList 2.10.8 and earlier, when register_globals is disabled, allows remote…
• CVE-2008-5887中 5.0phplist before 2.10.8 allows remote attackers to include files via unknown vectors, related to a "local file include vulnerability."