CVE-2007-1606

概要

参考情報

• osvdb.org/34377
• osvdb.org/34378
• osvdb.org/34379
• secunia.com/advisories/24605 · Vendor Advisory
• securityreason.com/securityalert/2462
• securityfocus.com/archive/1/463286/100/0/threaded
• securityfocus.com/bid/23057
• exchange.xforce.ibmcloud.com/vulnerabilities/33175

w-agora のその他の脆弱性

• CVE-2010-4868中 4.3Cross-site scripting (XSS) vulnerability in search.php3 (aka search.php) in W-Agora 4.2.1 and earlier allows remote attackers to inject arbi…
• CVE-2010-4867高 7.5Directory traversal vulnerability in search.php3 (aka search.php) in W-Agora 4.2.1 and earlier allows remote attackers to include and execut…
• CVE-2008-1466高 7.5Multiple PHP remote file inclusion vulnerabilities in W-Agora 4.0 allow remote attackers to execute arbitrary PHP code via a URL in the bn_d…
• CVE-2007-6647高 7.5SQL injection vulnerability in index.php in w-Agora 4.2.1 and earlier allows remote attackers to execute arbitrary SQL commands via the cat …
• CVE-2007-1607中 5.0search.php in w-Agora (Web-Agora) allows remote attackers to obtain potentially sensitive information via a ' (quote) value followed by cert…