CVE-2006-2835

概要

参考情報

• securityreason.com/securityalert/1047
• securityfocus.com/archive/1/435202/100/0/threaded
• securityfocus.com/archive/1/440120
• securityfocus.com/archive/1/472798/100/0/threaded
• securityfocus.com/bid/18117
• securityfocus.com/bid/18934
• exchange.xforce.ibmcloud.com/vulnerabilities/26757

saphplesson のその他の脆弱性

• CVE-2009-2883中 6.8SQL injection vulnerability in admin/login.php in SaphpLesson 4.0, when magic_quotes_gpc is disabled, allows remote attackers to execute arb…
• CVE-2006-2279高 7.5Multiple SQL injection vulnerabilities in SaphpLesson 3.0 allow remote attackers to execute arbitrary SQL commands via (1) the Find paramete…
• CVE-2006-2278中 5.0SaphpLesson 3.0 does not initialize array variables, which allows remote attackers to obtain the full path via an non-array (1) hrow paramet…
• CVE-2006-1720中 4.3Cross-site scripting (XSS) vulnerability in search.php in SaphpLesson 3.0 allows remote attackers to inject arbitrary web script or HTML via…
• CVE-2006-1420中 5.0SQL injection vulnerability in print.php in SaphpLesson 2.0 allows remote attackers to execute arbitrary SQL commands via the lessid paramet…