CVE-2006-4673

概要

参考情報

• marc.info
• retrogod.altervista.org/phpfusion_6-01-4_xpl.html · Exploit
• secunia.com/advisories/21830 · Patch
• php-fusion.co.uk/news.php
• securityfocus.com/bid/19908 · Exploit
• vupen.com/english/advisories/2006/3523
• exchange.xforce.ibmcloud.com/vulnerabilities/28818

php fusion のその他の脆弱性

• CVE-2006-3555中 5.8Multiple cross-site scripting (XSS) vulnerabilities in submit.php in PHP-Fusion before 6.01.3 allow remote attackers to inject arbitrary web…
• CVE-2006-2459中 6.4SQL injection vulnerability in messages.php in PHP-Fusion 6.00.307 and earlier allows remote authenticated users to execute arbitrary SQL co…
• CVE-2006-2331中 6.4Multiple directory traversal vulnerabilities in PHP-Fusion 6.00.306 allow remote attackers to include and execute arbitrary local files via …
• CVE-2006-2330中 6.4PHP-Fusion 6.00.306 and earlier, running under Apache HTTP Server 1.3.27 and PHP 4.3.3, allows remote authenticated users to upload files of…
• CVE-2006-0593中 4.3Cross-site scripting (XSS) vulnerability in PHP-Fusion before 6.00.304 allows remote attackers to inject arbitrary web script or HTML via th…