CVE-2007-6274

概要

参考情報

• lostmon.blogspot.com/2007/11/bcoops-sql-injection-and-cross-site.html · Exploit
• secunia.com/advisories/26945 · Vendor Advisory
• securityfocus.com/bid/26629 · Exploit
• exchange.xforce.ibmcloud.com/vulnerabilities/38734

bcoos のその他の脆弱性

• CVE-2008-7036中 4.3Multiple cross-site scripting (XSS) vulnerabilities in index.php in DevTracker module 3.0 for bcoos 1.1.11 and earlier, and DevTracker modul…
• CVE-2008-6381中 4.6SQL injection vulnerability in modules/adresses/viewcat.php in bcoos 1.0.13, and possibly earlier, allows remote authenticated users with Ad…
• CVE-2008-2350中 5.0Directory traversal vulnerability in highlight.php in bcoos 1.0.9 through 1.0.13 allows remote attackers to read arbitrary files via (1) .. …
• CVE-2007-6275高 7.5SQL injection vulnerability in modules/adresses/ratefile.php in bcoos 1.0.10 and earlier allows remote attackers to execute arbitrary SQL co…
• CVE-2007-6266高 7.5Multiple SQL injection vulnerabilities in bcoos 1.0.10 and earlier allow remote attackers to execute arbitrary SQL commands via (1) the gid …