CVE-2007-6275

概要

参考情報

• lostmon.blogspot.com/2007/11/bcoops-adressesratefilephp-lid-variable.html · Exploit
• secunia.com/advisories/26945 · Vendor Advisory

bcoos のその他の脆弱性

• CVE-2008-7036中 4.3Multiple cross-site scripting (XSS) vulnerabilities in index.php in DevTracker module 3.0 for bcoos 1.1.11 and earlier, and DevTracker modul…
• CVE-2008-6381中 4.6SQL injection vulnerability in modules/adresses/viewcat.php in bcoos 1.0.13, and possibly earlier, allows remote authenticated users with Ad…
• CVE-2008-2350中 5.0Directory traversal vulnerability in highlight.php in bcoos 1.0.9 through 1.0.13 allows remote attackers to read arbitrary files via (1) .. …
• CVE-2007-6274中 4.3Multiple cross-site scripting (XSS) vulnerabilities in modules/ecal/display.php in the Event Calendar in bcoos 1.0.10 and earlier allow remo…
• CVE-2007-6266高 7.5Multiple SQL injection vulnerabilities in bcoos 1.0.10 and earlier allow remote attackers to execute arbitrary SQL commands via (1) the gid …