CVE-2007-5643

概要

参考情報

• lussumo.com/community/discussion/7214/vanilla-113-new-remote-blind-sql-injection-exploit-
• lussumo.com/swell/168/Vanilla-114-Released
• secunia.com/advisories/27348
• securityfocus.com/bid/26145 · Exploit
• vupen.com/english/advisories/2007/3571
• exchange.xforce.ibmcloud.com/vulnerabilities/37345
• exploit-db.com/exploits/4548

vanilla のその他の脆弱性

• CVE-2010-1337高 7.5Multiple PHP remote file inclusion vulnerabilities in definitions.php in Lussumo Vanilla 1.1.10, and possibly 0.9.2 and other versions, allo…
• CVE-2009-1845中 4.3Cross-site scripting (XSS) vulnerability in ajax/updatecheck.php in Lussumo Vanilla 1.1.5 and 1.1.7 allows remote attackers to inject arbitr…
• CVE-2008-3874低 3.5Cross-site scripting (XSS) vulnerability in account.php in Lussumo Vanilla 1.1.5-rc1, 1.1.4, and earlier allows remote authenticated users t…
• CVE-2008-3760中 4.3Cross-site request forgery (CSRF) vulnerability in the sign-out page in Vanilla 1.1.4 and earlier allows remote attackers to hijack the auth…
• CVE-2008-3759高 7.5Cross-site request forgery (CSRF) vulnerability in ajax/UpdateCheck.php in Vanilla 1.1.4 and earlier has unknown impact and remote attack ve…