CVE-2006-6048

概要

参考情報

• secunia.com/advisories/22885 · Vendor Advisory
• 0xcafebabe.it/sploits/etm_0612_sqlinj.pl · Exploit
• etomite.org/forums/index.php
• securityfocus.com/archive/1/451838/100/0/threaded
• securityfocus.com/archive/1/451930/100/0/threaded
• securityfocus.com/bid/21135
• vupen.com/english/advisories/2006/4558
• exchange.xforce.ibmcloud.com/vulnerabilities/30328

etomite のその他の脆弱性

• CVE-2011-4264中 4.3Cross-site scripting (XSS) vulnerability in Etomite before 1.1 allows remote attackers to inject arbitrary web script or HTML via unspecifie…
• CVE-2008-0820中 4.3Cross-site scripting (XSS) vulnerability in index.php in Etomite 0.6.1.4 Final allows remote attackers to inject arbitrary web script or HTM…
• CVE-2006-7070高 7.5Unrestricted file upload vulnerability in manager/media/ibrowser/scripts/rfiles.php in Etomite CMS 0.6.1 and earlier allows remote attackers…
• CVE-2006-6047中 5.8Directory traversal vulnerability in manager/index.php in Etomite 0.6.1.2 allows remote authenticated administrators to include and execute …
• CVE-2006-5242高 7.5SQL injection vulnerability in Etomite Content Management System (CMS) before 0.6.1.1 allows remote attackers to execute arbitrary SQL comma…