CVE-2006-6871

概要

参考情報

• secunia.com/advisories/23502 · Vendor Advisory
• securityfocus.com/bid/21333 · Exploit
• vupen.com/english/advisories/2006/5187
• exchange.xforce.ibmcloud.com/vulnerabilities/31116
• exploit-db.com/exploits/3004

endonesia のその他の脆弱性

• CVE-2023-31753緊急 9.8SQL injection vulnerability in diskusi.php in eNdonesia 8.7, allows an attacker to execute arbitrary SQL commands via the "rid=" parameter.
• CVE-2010-3461高 7.5SQL injection vulnerability in the Publisher module in eNdonesia 8.4 allows remote attackers to execute arbitrary SQL commands via the artid…
• CVE-2008-3452中 6.8SQL injection vulnerability in the Calendar module in eNdonesia 8.4 allows remote attackers to execute arbitrary SQL commands via the loc_id…
• CVE-2007-3394高 7.5Multiple SQL injection vulnerabilities in eNdonesia 8.4 allow remote attackers to execute arbitrary SQL commands via the (1) artid parameter…
• CVE-2006-6874中 6.8Multiple cross-site scripting (XSS) vulnerabilities in friend.php in eNdonesia 8.4 allow remote attackers to inject arbitrary web script or …