CVE-2006-4417

概要

参考情報

• devteam.xoops.org/releases/changelog-2.0.15.html
• secunia.com/advisories/21643
• securityreason.com/securityalert/1461
• hackers.ir/advisories/xoops.html
• osvdb.org/28265
• securityfocus.com/archive/1/444419/100/0/threaded
• securityfocus.com/bid/19720
• vupen.com/english/advisories/2006/3402
• exchange.xforce.ibmcloud.com/vulnerabilities/28586

xoops のその他の脆弱性

• CVE-2023-36217緊急 9.0Cross Site Scripting vulnerability in Xoops CMS v.2.5.10 allows a remote attacker to execute arbitrary code via the category name field of t…
• CVE-2019-16684中 4.8An issue was discovered in the image-manager in Xoops 2.5.10. When any image with a JavaScript payload as its name is hovered over in the li…
• CVE-2019-16683中 4.8An issue was discovered in the image-manager in Xoops 2.5.10. When the breadcrumb showing the category name is hovered over while editing an…
• CVE-2017-12139中 6.1XOOPS Core 2.5.8 has stored XSS in imagemanager.php because of missing MIME type validation in htdocs/class/uploader.php.
• CVE-2017-12138中 6.1XOOPS Core 2.5.8 has a stored URL redirect bypass vulnerability in /modules/profile/index.php because of the URL filter.