CVE-2007-0623

概要

参考情報

• osvdb.org/33011
• osvdb.org/33612
• secunia.com/advisories/23948 · Vendor Advisory
• securityreason.com/securityalert/2198
• securityfocus.com/archive/1/458438/100/0/threaded
• securityfocus.com/bid/22293 · Exploit
• vupen.com/english/advisories/2007/0412
• exchange.xforce.ibmcloud.com/vulnerabilities/31897

mdpro のその他の脆弱性

• CVE-2009-2618高 7.5SQL injection vulnerability in the Surveys (aka NS-Polls) module in MDPro (MD-Pro) 1.083.x allows remote attackers to execute arbitrary SQL …
• CVE-2007-5222高 7.5SQL injection vulnerability in index.php in MAXdev MDPro (MD-Pro) 1.0.76 allows remote attackers to execute arbitrary SQL commands via a "Fi…
• CVE-2007-3938高 7.5SQL injection vulnerability in index.php in MAXdev MDPro (MD-Pro) 1.0.8x and earlier before 20070720 allows remote attackers to execute arbi…
• CVE-2006-7112中 6.0Directory traversal vulnerability in error.php in MD-Pro 1.0.76 and earlier allows remote authenticated users to read and include arbitrary …
• CVE-2007-0624中 5.0user.php in MAXdev MDPro 1.0.76 allows remote attackers to obtain the full path via a ' (quote) character, and possibly other invalid values…