CVE-2006-3905

概要

参考情報

• lists.grok.org.uk/pipermail/full-disclosure/2006-May/046094.html · Exploit
• marc.info
• h4cky0u.org/advisories/HYSA-2006-008-mybloggie.txt · Exploit
• osvdb.org/displayvuln.php
• osvdb.org/displayvuln.php
• securityfocus.com/archive/1/441356/100/0/threaded
• exchange.xforce.ibmcloud.com/vulnerabilities/26486

mybloggie のその他の脆弱性

• CVE-2008-3080中 5.1Cross-site request forgery (CSRF) vulnerability in admin.php in myWebland myBloggie 2.1.6 allows remote attackers to perform edit actions as…
• CVE-2007-3650中 5.3myWebland myBloggie 2.1.6 allow remote attackers to obtain sensitive information via (1) an invalid year parameter to calendar.php, reached …
• CVE-2007-1899中 5.1Multiple SQL injection vulnerabilities in myWebland myBloggie 2.1.6 allow remote attackers to execute arbitrary SQL commands via (1) the use…
• CVE-2007-3194緊急 9.8Multiple PHP remote file inclusion vulnerabilities in myBloggie 2.1.5 allow remote attackers to execute arbitrary PHP code via a URL in the …
• CVE-2007-3003高 7.5Multiple SQL injection vulnerabilities in myBloggie 2.1.6 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) c…