CVE-2007-0381

概要

参考情報

• archives.neohapsis.com/archives/fulldisclosure/2007-01/0355.html · Vendor Advisory
• osvdb.org/34660
• atutor.ca/atutor/mantis/changelog_page.php · Patch
• hackers.ir/advisories/festival.txt · Vendor Advisory

atutor のその他の脆弱性

• CVE-2006-5734高 7.5Multiple PHP remote file inclusion vulnerabilities in ATutor 1.5.3.2 allow remote attackers to execute arbitrary PHP code via a URL in the (…
• CVE-2006-3996中 6.5SQL injection vulnerability in links/index.php in ATutor 1.5.3.1 and earlier allows remote authenticated users to execute arbitrary SQL comm…
• CVE-2006-3821中 4.3Multiple cross-site scripting (XSS) vulnerabilities in ATutor 1.5.3 allow remote attackers to inject arbitrary web script or HTML via the (1…
• CVE-2006-3662高 7.5SQL injection vulnerability in index.php in ATutor 1.5.3 allows remote attackers to execute arbitrary SQL commands via the fid parameter. NO…
• CVE-2006-3484低 2.6Multiple cross-site scripting (XSS) vulnerabilities in ATutor before 1.5.3 allow remote attackers to inject arbitrary web script or HTML via…