CVE-2007-0378

概要

参考情報

• archives.neohapsis.com/archives/fulldisclosure/2007-01/0355.html · Vendor Advisory
• osvdb.org/34650
• hackers.ir/advisories/festival.txt · Vendor Advisory

docman のその他の脆弱性

• CVE-2007-0380中 5.0DocMan 1.3 RC2 allows remote attackers to obtain sensitive information (the full path) via unspecified vectors.
• CVE-2007-0379中 6.8Cross-site scripting (XSS) vulnerability in DocMan 1.3 RC2 allows remote attackers to inject arbitrary web script or HTML via unspecified ve…