CVE-2006-6356

概要

参考情報

• secunia.com/advisories/23214 · Vendor Advisory
• securityreason.com/securityalert/1994
• securityfocus.com/archive/1/453321/100/0/threaded
• securityfocus.com/bid/21404 · Vendor Advisory
• vupen.com/english/advisories/2006/4826
• exchange.xforce.ibmcloud.com/vulnerabilities/30664

phpnews のその他の脆弱性

• CVE-2006-7081高 7.5Multiple PHP remote file inclusion vulnerabilities in PhpNews 1.0 allow remote attackers to execute arbitrary PHP code via the Include param…
• CVE-2006-6357中 6.8Cross-site scripting (XSS) vulnerability in templates/cat_temp.php in PHPNews 1.3.0 and earlier allows remote attackers to inject arbitrary …
• CVE-2005-2383高 7.5SQL injection vulnerability in auth.php in PHPNews 1.2.5 allows remote attackers to execute arbitrary SQL commands via the user parameter in…
• CVE-2005-2156高 7.5SQL injection vulnerability in news.php in PHPNews 1.2.5 allows remote attackers to execute arbitrary SQL commands via the prevnext paramete…
• CVE-2005-0632中 5.0PHP remote file inclusion vulnerability in auth.php in PHPNews 1.2.4 and possibly 1.2.3, allows remote attackers to execute arbitrary PHP co…