CVE-2007-4421

概要

参考情報

• myimei.com/security/2007-08-16/olate-download-341adminphpauthentication-bypassing.html
• osvdb.org/39712
• secunia.com/advisories/26533
• securityreason.com/securityalert/3028
• sourceforge.net/forum/forum.php
• sourceforge.net/project/shownotes.php
• sourceforge.net/project/shownotes.php
• securityfocus.com/archive/1/476760/100/0/threaded
• securityfocus.com/archive/1/477223/100/0/threaded
• securityfocus.com/bid/25384
• exchange.xforce.ibmcloud.com/vulnerabilities/36089

olatedownload のその他の脆弱性

• CVE-2007-4541中 4.3Multiple cross-site scripting (XSS) vulnerabilities in Olate Download (od) 3.4.2 allow remote attackers to inject arbitrary web script or HT…
• CVE-2007-4540高 7.5Multiple SQL injection vulnerabilities in download.php in Olate Download (od) 3.4.2 allow remote attackers to execute arbitrary SQL commands…
• CVE-2007-4454中 6.8Eval injection vulnerability in environment.php in Olate Download (od) 3.4.1 allows context-dependent attackers to execute arbitrary code vi…
• CVE-2007-4419緊急 9.3Admin.php in Olate Download (od) 3.4.1 uses an MD5 hash of the admin username, user id, and group id, to compose the OD3_AutoLogin authentic…
• CVE-2006-5145高 7.5Multiple SQL injection vulnerabilities in OlateDownload 3.4.0 allow remote attackers to execute arbitrary SQL commands via the (1) page para…