CVE-2007-0308

概要

参考情報

• osvdb.org/32813
• secunia.com/advisories/23718 · Vendor Advisory
• plainblack.com/getwebgui/advisories/webgui-7_3_4-beta-released · Patch
• securityfocus.com/bid/22051 · Patch

webgui のその他の脆弱性

• CVE-2008-2077緊急 10.0Unspecified vulnerability in Plain Black WebGUI 7.4.34 has unknown impact and attack vectors related to "data form list view."
• CVE-2007-6487中 4.9Unspecified vulnerability in Plain Black WebGUI 7.4.0 through 7.4.17 allows remote authenticated users with Secondary Admin privileges to cr…
• CVE-2007-2746低 3.5The viewList function in lib/WebGUI/Asset/Wobject/DataForm.pm in Plain Black WebGUI before 7.3.14 does not properly use data structures cont…
• CVE-2007-0629中 6.4The www_purgeList method in Plain Black WebGUI before 7.3.8 does not properly check user permissions, which allows attackers to delete unaut…
• CVE-2007-0407中 6.8Cross-site scripting (XSS) vulnerability in Operation/User.pm in Plain Black WebGUI before 7.3.5 (beta) allows remote attackers to inject ar…