CVE-2006-2279

概要

参考情報

• secunia.com/advisories/20034 · Vendor Advisory
• securityreason.com/securityalert/862
• osvdb.org/25362
• osvdb.org/25363
• securityfocus.com/archive/1/433052/100/0/threaded
• securityfocus.com/bid/17848
• vupen.com/english/advisories/2006/1708
• exchange.xforce.ibmcloud.com/vulnerabilities/26293

saphplesson のその他の脆弱性

• CVE-2009-2883中 6.8SQL injection vulnerability in admin/login.php in SaphpLesson 4.0, when magic_quotes_gpc is disabled, allows remote attackers to execute arb…
• CVE-2006-2835高 7.5SQL injection vulnerability in saphplesson 2.0 allows remote attackers to execute arbitrary SQL commands via the (1) forumid parameter in ad…
• CVE-2006-2278中 5.0SaphpLesson 3.0 does not initialize array variables, which allows remote attackers to obtain the full path via an non-array (1) hrow paramet…
• CVE-2006-1720中 4.3Cross-site scripting (XSS) vulnerability in search.php in SaphpLesson 3.0 allows remote attackers to inject arbitrary web script or HTML via…
• CVE-2006-1420中 5.0SQL injection vulnerability in print.php in SaphpLesson 2.0 allows remote attackers to execute arbitrary SQL commands via the lessid paramet…