CVE-2006-4056

概要

参考情報

• secunia.com/advisories/21364 · Vendor Advisory
• secunia.com/advisories/21379 · Patch
• sourceforge.net/project/shownotes.php · Patch
• securityfocus.com/bid/19378
• securityfocus.com/bid/19380
• vupen.com/english/advisories/2006/3174
• vupen.com/english/advisories/2006/3176
• exchange.xforce.ibmcloud.com/vulnerabilities/28258

the address book のその他の脆弱性

• CVE-2006-4582中 5.0Cross-site request forgery (CSRF) vulnerability in The Address Book 1.04e allows remote attackers to perform unauthorized actions as other u…
• CVE-2006-4581中 5.0Unrestricted file upload vulnerability in The Address Book 1.04e validates the Content-Type header but not the file extension, which allows …
• CVE-2006-4580高 7.5register.php in The Address Book 1.04e allows remote attackers to bypass the "Allow User Self-Registration" setting and create arbitrary use…
• CVE-2006-4579中 5.0Directory traversal vulnerability in users.php in The Address Book 1.04e allows remote attackers to include arbitrary files via a .. (dot do…
• CVE-2006-4578高 7.5export.php in The Address Book 1.04e writes username and password hash information into a publicly accessible file when dumping the MySQL da…