CVE-2007-5980

概要

参考情報

• secunia.com/advisories/27668 · Vendor Advisory
• securityreason.com/securityalert/3361
• sourceforge.net/project/shownotes.php
• h-labs.org/blog/2007/11/11/eggblog_v3_1_0_xss_issues.html
• securityfocus.com/archive/1/483569/100/0/threaded
• securityfocus.com/bid/26408 · Patch
• exchange.xforce.ibmcloud.com/vulnerabilities/38420

eggblog のその他の脆弱性

• CVE-2011-3732中 5.0eggBlog 4.1.2 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation pa…
• CVE-2008-1626高 7.5SQL injection vulnerability in eggBlog before 4.0.1 allows remote attackers to execute arbitrary SQL commands via an unspecified cookie. NOT…
• CVE-2008-0159中 6.8SQL injection vulnerability in index.php in eggBlog 3.1.0 and earlier allows remote attackers to execute arbitrary SQL commands via the eggb…
• CVE-2007-2978中 6.8Session fixation vulnerability in eggblog 3.1.0 and earlier allows remote attackers to hijack web sessions by setting the PHPSESSID paramete…