CVE-2007-1965

概要

参考情報

• marc.info · Vendor Advisory
• majorsecurity.de/index_2.php · Vendor Advisory
• securityfocus.com/bid/23314

content management system のその他の脆弱性

• CVE-2007-4365中 4.3Cross-site scripting (XSS) vulnerability in eXV2 CMS 2.0.5 and earlier allows remote attackers to inject arbitrary web script or HTML via a …
• CVE-2007-1966緊急 9.1Session fixation vulnerability in eXV2 CMS 2.0.4.3 and earlier allows remote attackers to hijack web sessions by setting the PHPSESSID cooki…
• CVE-2006-7080中 4.3Directory traversal vulnerability in the avatar upload feature in exV2 2.0.4.3 and earlier allows remote attackers to delete arbitrary files…
• CVE-2006-7079緊急 9.8Variable extraction vulnerability in include/common.php in exV2 2.0.4.3 and earlier allows remote attackers to overwrite arbitrary program v…
• CVE-2006-5030高 7.5SQL injection vulnerability in modules/messages/index.php in exV2 2.0.4.3 and earlier allows remote authenticated users to execute arbitrary…