CVE-2006-5294

概要

参考情報

• mantis.phplist.com/changelog_page.php · Patch
• secunia.com/advisories/22405 · Patch
• securityreason.com/securityalert/1728
• tincan.co.uk · Patch
• websecurity.com.ua/267
• phplist.com/news
• securityfocus.com/archive/1/448411/100/0/threaded
• securityfocus.com/bid/20483 · Exploit
• vupen.com/english/advisories/2006/4027

phplist のその他の脆弱性

• CVE-2012-5228中 4.3Cross-site scripting (XSS) vulnerability in admin/index.php in phplist 2.10.9, 2.10.17, and possibly other versions before 2.10.19 allows re…
• CVE-2011-1682中 4.3Multiple cross-site request forgery (CSRF) vulnerabilities in phpList 2.10.13 and earlier allow remote attackers to hijack the authenticatio…
• CVE-2011-0748中 6.8Multiple cross-site request forgery (CSRF) vulnerabilities in phpList before 2.10.13 allow remote attackers to hijack the authentication of …
• CVE-2009-0422高 7.5Dynamic variable evaluation vulnerability in lists/admin.php in phpList 2.10.8 and earlier, when register_globals is disabled, allows remote…
• CVE-2008-5887中 5.0phplist before 2.10.8 allows remote attackers to include files via unknown vectors, related to a "local file include vulnerability."