CVE-2006-4010

概要

参考情報

• archives.neohapsis.com/archives/bugtraq/2008-02/0186.html
• securityreason.com/securityalert/1331
• securityfocus.com/archive/1/442101/100/0/threaded
• securityfocus.com/archive/1/443171/100/0/threaded
• securityfocus.com/archive/1/488118/100/200/threaded
• securityfocus.com/bid/19327 · Exploit
• securityfocus.com/bid/27772 · Exploit
• exchange.xforce.ibmcloud.com/vulnerabilities/40481

virtual war のその他の脆弱性

• CVE-2010-5279中 5.0article.php in Virtual War (aka VWar) 1.6.1 R2 allows remote attackers to cause a denial of service (memory consumption) via a large integer…
• CVE-2010-5067中 6.8Virtual War (aka VWar) 1.6.1 R2 uses static session cookies that depend only on a user's password, which makes it easier for remote attacker…
• CVE-2010-5066中 4.3The createRandomPassword function in includes/functions_common.php in Virtual War (aka VWar) 1.6.1 R2 uses a small range of values to select…
• CVE-2010-5065中 5.0popup.php in Virtual War (aka VWar) 1.6.1 R2 allows remote attackers to bypass intended member restrictions and read news posts via a modifi…
• CVE-2010-5064中 4.3Multiple cross-site scripting (XSS) vulnerabilities in Virtual War (aka VWar) 1.6.1 R2 allow remote attackers to inject arbitrary web script…