CVE-2006-3292

概要

参考情報

• retrogod.altervista.org/JAWS_062_sql.html · Exploit
• secunia.com/advisories/20842 · Vendor Advisory
• securityreason.com/securityalert/1165
• jaws-project.com/index.php · Patch
• securityfocus.com/archive/1/438434/100/0/threaded
• securityfocus.com/bid/18665 · Exploit
• vupen.com/english/advisories/2006/2546
• exchange.xforce.ibmcloud.com/vulnerabilities/27334

jaws のその他の脆弱性

• CVE-2009-0645中 6.5Directory traversal vulnerability in index.php in Jaws 0.8.8 allows remote authenticated users to read arbitrary files via a .. (dot dot) in…
• CVE-2005-3955中 4.3Multiple cross-site scripting (XSS) vulnerabilities in MagpieRSS 7.1, as used in (a) blogBuddiesv 0.3, (b) Jaws 0.6.2, and possibly other pr…
• CVE-2005-2179中 5.0PHP remote file inclusion vulnerability in BlogModel.php in Jaws 0.5.2 and earlier allows remote attackers to execute arbitrary PHP code via…
• CVE-2005-1231中 4.3Cross-site scripting (XSS) vulnerability in the NewTerm function in GlossaryModel.php in JAWS 0.4 allows remote attackers to inject arbitrar…
• CVE-2004-2445中 5.0Directory traversal vulnerability in index.php in Jaws 0.3 BETA allows remote attackers to view arbitrary files via a .. (dot dot) in the ga…