CVE-2007-6467

概要

参考情報

• securityreason.com/securityalert/3465
• securityfocus.com/archive/1/485035/100/0/threaded
• securityfocus.com/bid/26860 · Exploit
• exchange.xforce.ibmcloud.com/vulnerabilities/39027

mkportal のその他の脆弱性

• CVE-2007-3814高 7.5Multiple SQL injection vulnerabilities in MKPortal 1.1.1 allow remote attackers to execute arbitrary SQL commands via (1) the idurlo field i…
• CVE-2007-3637高 7.5SQL injection vulnerability in MKPortal 1.1.1 allows remote attackers to execute arbitrary SQL commands via unspecified vectors, aka ZD-0000…
• CVE-2007-0194高 7.8admin.php in MKPortal M1.1 RC1 allows remote attackers to obtain sensitive information via a direct request with an MK_PATH=1 query string, …
• CVE-2006-6741中 5.8Cross-site request forgery (CSRF) vulnerability in urlobox in MKPortal allows remote attackers to delete arbitrary messages as an administra…
• CVE-2006-4665中 4.3Cross-site scripting (XSS) vulnerability in index.php in MKPortal M1.1 Rc1 allows remote attackers to inject arbitrary web script or HTML vi…