CVE-2007-4540

概要

参考情報

• myimei.com/security/2007-08-22/olate-download-342downloadphp-sql-injection.html
• osvdb.org/38581
• securityreason.com/securityalert/3062
• securityfocus.com/archive/1/477340/100/0/threaded
• securityfocus.com/bid/25410
• exchange.xforce.ibmcloud.com/vulnerabilities/36214

olatedownload のその他の脆弱性

• CVE-2007-4541中 4.3Multiple cross-site scripting (XSS) vulnerabilities in Olate Download (od) 3.4.2 allow remote attackers to inject arbitrary web script or HT…
• CVE-2007-4454中 6.8Eval injection vulnerability in environment.php in Olate Download (od) 3.4.1 allows context-dependent attackers to execute arbitrary code vi…
• CVE-2007-4421緊急 9.3SQL injection vulnerability in Admin.php in Olate Download (od) 3.4.1 allows remote attackers to execute arbitrary SQL commands via an OD3_A…
• CVE-2007-4419緊急 9.3Admin.php in Olate Download (od) 3.4.1 uses an MD5 hash of the admin username, user id, and group id, to compose the OD3_AutoLogin authentic…
• CVE-2006-5145高 7.5Multiple SQL injection vulnerabilities in OlateDownload 3.4.0 allow remote attackers to execute arbitrary SQL commands via the (1) page para…