CVE-2007-1848

概要

参考情報

• securityreason.com/securityalert/2522
• securityfocus.com/archive/1/464272/100/0/threaded
• securityfocus.com/bid/23216 · Exploit
• exchange.xforce.ibmcloud.com/vulnerabilities/33332

drake cms のその他の脆弱性

• CVE-2008-6475高 7.5SQL injection vulnerability in the guestbook component (components/guestbook/guestbook.php) in Drake CMS 0.4.11 and earlier allows remote at…
• CVE-2008-1371低 3.6Absolute path traversal vulnerability in install/index.php in Drake CMS 0.4.11 RC8 allows remote attackers to read and execute arbitrary fil…
• CVE-2007-6695中 4.3Cross-site scripting (XSS) vulnerability in index.php in Drake CMS 0.4.9 allows remote attackers to inject arbitrary web script or HTML via …
• CVE-2007-2618中 5.1CRLF injection vulnerability in index.php in Drake CMS 0.4.0 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP respo…
• CVE-2007-1849高 7.5Directory traversal vulnerability in 404.php in Drake CMS allows remote attackers to include and execute arbitrary local arbitrary files via…