CVE-2006-7115

概要

参考情報

• secunia.com/advisories/17479 · Vendor Advisory
• securityreason.com/securityalert/2357
• bb-pcsecurity.de/websecurity/532/org/PHPKit_1.6.1_RC2_%28faq-faq.php%29_Remote_SQL_Injection_Exploit.htm
• osvdb.org/31265
• securityfocus.com/archive/1/451304/100/0/threaded
• securityfocus.com/bid/21002 · Exploit
• exchange.xforce.ibmcloud.com/vulnerabilities/30209

phpkit のその他の脆弱性

• CVE-2016-10758高 8.8PHPKIT 1.6.6 allows arbitrary File Upload, as demonstrated by a .php file to pkinc/admin/mediaarchive.php and pkinc/func/default.php via the…
• CVE-2015-1052中 4.3Cross-site scripting (XSS) vulnerability in the poll archive in PHPKIT 1.6.6 (Build 160014) allows remote attackers to inject arbitrary web …
• CVE-2008-7193中 6.8PHPKIT 1.6.4 PL1 includes the session ID in the URL, which allows remote attackers to conduct cross-site request forgery (CSRF) attacks by r…
• CVE-2007-6134高 7.5SQL injection vulnerability in pkinc/public/article.php in PHPKIT 1.6.4pl1 allows remote attackers to execute arbitrary SQL commands via the…
• CVE-2007-0179高 7.5SQL injection vulnerability in comment.php in PHPKIT 1.6.1 R2 allows remote attackers to execute arbitrary SQL commands via the subid parame…