CVE-2007-2368

概要

参考情報

• vupen.com/english/advisories/2007/1274
• exploit-db.com/exploits/3673

webspell のその他の脆弱性

• CVE-2010-4861高 7.5SQL injection vulnerability in asearch.php in webSPELL 4.2.1 allows remote attackers to execute arbitrary SQL commands via the search parame…
• CVE-2009-1912中 6.8Directory traversal vulnerability in src/func/language.php in webSPELL 4.2.0e and earlier allows remote attackers to include and execute arb…
• CVE-2009-1408中 4.3Cross-site scripting (XSS) vulnerability in webSPELL 4.2.0c allows remote attackers to inject arbitrary web script or HTML allows remote att…
• CVE-2008-1481中 4.3Cross-site scripting (XSS) vulnerability in index.php in webSPELL 4.1.2 allows remote attackers to inject arbitrary web script or HTML via t…
• CVE-2008-0575中 4.3Cross-site request forgery (CSRF) vulnerability in admin/admincenter.php in webSPELL 4.01.02 allows remote attackers to assign the superadmi…