CVE-2007-0372

概要

参考情報

• archives.neohapsis.com/archives/fulldisclosure/2007-01/0355.html · Exploit
• osvdb.org/33698
• osvdb.org/33699
• osvdb.org/33700
• osvdb.org/33701
• osvdb.org/33702
• hackers.ir/advisories/festival.txt · Exploit
• securityfocus.com/archive/1/459174/100/0/threaded
• securityfocus.com/bid/22116 · Exploit

php-nuke のその他の脆弱性

• CVE-2008-0461中 6.8SQL injection vulnerability in index.php in the Search module in PHP-Nuke 8.0 FINAL and earlier, when magic_quotes_gpc is disabled, allows r…
• CVE-2007-6376高 7.5Directory traversal vulnerability in autohtml.php in Francisco Burzi PHP-Nuke 8.0 allows remote attackers to include and execute arbitrary l…
• CVE-2007-5032中 5.1Cross-site request forgery (CSRF) vulnerability in admin.php in Francisco Burzi PHP-Nuke allows remote attackers to add administrative accou…
• CVE-2007-1061中 6.8SQL injection vulnerability in index.php in Francisco Burzi PHP-Nuke 8.0 Final and earlier, when the "HTTP Referers" block is enabled, allow…
• CVE-2007-0309高 7.5SQL injection vulnerability in blocks/block-Old_Articles.php in Francisco Burzi PHP-Nuke 7.9 and earlier, when register_globals is enabled a…