CVE-2007-1148

概要

参考情報

• osvdb.org/33516
• securityreason.com/securityalert/2338
• securityfocus.com/archive/1/460917/100/0/threaded
• securityfocus.com/bid/22675 · Exploit
• vupen.com/english/advisories/2007/0716

lovecms のその他の脆弱性

• CVE-2008-7062中 6.8Unrestricted file upload vulnerability in admin/index.php in Download Manager module 1.0 for LoveCMS 1.6.2 Final allows remote attackers to …
• CVE-2008-5794中 5.0Directory traversal vulnerability in system/admin/images.php in LoveCMS 1.6.2 Final allows remote attackers to delete arbitrary files via a …
• CVE-2008-3509高 7.5LoveCMS 1.6.2 does not require administrative authentication for (1) addblock.php, (2) blocks.php, and (3) themes.php in system/admin/, whic…
• CVE-2007-1151中 4.3Cross-site scripting (XSS) vulnerability in LoveCMS 1.4 allows remote attackers to inject arbitrary web script or HTML via the id parameter …
• CVE-2007-1150低 3.6Unrestricted file upload vulnerability in LoveCMS 1.4 allows remote authenticated administrators to upload arbitrary files to /modules/conte…