CVE-2007-0309

概要

参考情報

• osvdb.org/32863
• secunia.com/advisories/23748
• securityreason.com/securityalert/2153
• securitytracker.com/id
• neosecurityteam.net/advisories/PHP-Nuke--7.9-Old-Articles-Block-cat-SQL-Injection-vulnerability-31.html
• securityfocus.com/archive/1/456787/100/0/threaded
• securityfocus.com/bid/22037 · Exploit
• exchange.xforce.ibmcloud.com/vulnerabilities/31482

php-nuke のその他の脆弱性

• CVE-2008-0461中 6.8SQL injection vulnerability in index.php in the Search module in PHP-Nuke 8.0 FINAL and earlier, when magic_quotes_gpc is disabled, allows r…
• CVE-2007-6376高 7.5Directory traversal vulnerability in autohtml.php in Francisco Burzi PHP-Nuke 8.0 allows remote attackers to include and execute arbitrary l…
• CVE-2007-5032中 5.1Cross-site request forgery (CSRF) vulnerability in admin.php in Francisco Burzi PHP-Nuke allows remote attackers to add administrative accou…
• CVE-2007-1061中 6.8SQL injection vulnerability in index.php in Francisco Burzi PHP-Nuke 8.0 Final and earlier, when the "HTTP Referers" block is enabled, allow…
• CVE-2007-0372高 7.5Multiple SQL injection vulnerabilities in Francisco Burzi PHP-Nuke 7.9 allow remote attackers to execute arbitrary SQL commands via (1) the …