CVE-2007-1153

概要

参考情報

• osvdb.org/37397
• securityfocus.com/bid/22674

cutenews のその他の脆弱性

• CVE-2020-5558高 8.8CuteNews 2.0.1 allows remote authenticated attackers to execute arbitrary PHP code via unspecified vectors.
• CVE-2020-5557中 6.1Cross-site scripting vulnerability in CuteNews 2.0.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
• CVE-2019-11447高 8.8An issue was discovered in CutePHP CuteNews 2.1.2. An attacker can infiltrate the server through the avatar upload process in the profile ar…
• CVE-2009-4250中 4.3Multiple cross-site scripting (XSS) vulnerabilities in CutePHP CuteNews 1.4.6 and UTF-8 CuteNews before 8b allow remote attackers to inject …
• CVE-2009-4249低 2.6Multiple cross-site scripting (XSS) vulnerabilities in CutePHP CuteNews 1.4.6, when register_globals is enabled and magic_quotes_gpc is disa…