CVE-2006-2067

概要

参考情報

• securityreason.com/securityalert/801
• securitytracker.com/id · Exploit
• nukedx.com · Exploit
• securityfocus.com/archive/1/431759/100/0/threaded
• securityfocus.com/bid/17651

mkportal のその他の脆弱性

• CVE-2007-6467高 7.5SQL injection vulnerability in index.php in MKPortal 1.1 RC1 allows remote attackers to execute arbitrary SQL commands via the ida parameter…
• CVE-2007-3814高 7.5Multiple SQL injection vulnerabilities in MKPortal 1.1.1 allow remote attackers to execute arbitrary SQL commands via (1) the idurlo field i…
• CVE-2007-3637高 7.5SQL injection vulnerability in MKPortal 1.1.1 allows remote attackers to execute arbitrary SQL commands via unspecified vectors, aka ZD-0000…
• CVE-2007-0194高 7.8admin.php in MKPortal M1.1 RC1 allows remote attackers to obtain sensitive information via a direct request with an MK_PATH=1 query string, …
• CVE-2006-6741中 5.8Cross-site request forgery (CSRF) vulnerability in urlobox in MKPortal allows remote attackers to delete arbitrary messages as an administra…