CVE-2006-2174

概要

参考情報

• secunia.com/advisories/19940 · Vendor Advisory
• securityreason.com/securityalert/832
• aria-security.net/hm/vhcs.txt
• securityfocus.com/archive/1/432711 · Exploit
• securityfocus.com/bid/17790 · Exploit
• vupen.com/english/advisories/2006/1634
• exchange.xforce.ibmcloud.com/vulnerabilities/26209

virtual hosting control system のその他の脆弱性

• CVE-2007-3988中 6.8Session fixation vulnerability in Virtual Hosting Control System (VHCS) 2.4.7.1 and earlier allows remote attackers to hijack web sessions b…
• CVE-2006-0686緊急 10.0add_user.php in Virtual Hosting Control System (VHCS) 2.4.7.1 and earlier does not check user privileges when adding a new administrative us…
• CVE-2006-0685緊急 10.0The check_login function in login.php in Virtual Hosting Control System (VHCS) 2.4.7.1 and earlier does not exit when authentication fails, …
• CVE-2006-0684高 7.5change_password.php in Virtual Hosting Control System (VHCS) 2.4.7.1 and earlier does not verify the old password when a user changes the pa…
• CVE-2006-0683中 4.3Cross-site scripting (XSS) vulnerability in Virtual Hosting Control System (VHCS) 2.4.7.1 with v.1 patch and earlier allows remote attackers…