CVE-2007-4177

概要

参考情報

• cce-interact.cvs.sourceforge.net/cce-interact/Interact/includes/common.inc.php
• osvdb.org/36440
• secunia.com/advisories/26304 · Vendor Advisory
• sourceforge.net/project/shownotes.php
• securityfocus.com/bid/25173
• exchange.xforce.ibmcloud.com/vulnerabilities/35765

interact のその他の脆弱性

• CVE-2008-2220中 6.8Multiple PHP remote file inclusion vulnerabilities in Interact Learning Community Environment Interact 2.4.1, when register_globals is enabl…
• CVE-2007-3328中 4.3Multiple cross-site scripting (XSS) vulnerabilities in Interact 2.4 beta 1 allow remote attackers to inject arbitrary web script or HTML via…
• CVE-2006-1644中 5.0login.php in Interact 2.1.1 generates different responses depending on whether or not a username is valid, which allows remote attackers to …
• CVE-2006-1643高 7.5SQL injection vulnerability in login.php in Interact 2.1.1 allows remote attackers to execute arbitrary SQL commands via the user_name param…
• CVE-2006-1642低 2.6Cross-site scripting (XSS) vulnerability in Interact 2.1.1 allows remote attackers to inject arbitrary web script or HTML via (1) the search…