CVE-2007-6487

概要

参考情報

• osvdb.org/42632
• secunia.com/advisories/28059 · Vendor Advisory
• plainblack.com/bugs/tracker/secondary-admin-can-create-user-with-admin-privilege
• plainblack.com/getwebgui/advisories/webgui-7_4_18-stable-released
• exchange.xforce.ibmcloud.com/vulnerabilities/39041

webgui のその他の脆弱性

• CVE-2008-2077緊急 10.0Unspecified vulnerability in Plain Black WebGUI 7.4.34 has unknown impact and attack vectors related to "data form list view."
• CVE-2007-2746低 3.5The viewList function in lib/WebGUI/Asset/Wobject/DataForm.pm in Plain Black WebGUI before 7.3.14 does not properly use data structures cont…
• CVE-2007-0629中 6.4The www_purgeList method in Plain Black WebGUI before 7.3.8 does not properly check user permissions, which allows attackers to delete unaut…
• CVE-2007-0407中 6.8Cross-site scripting (XSS) vulnerability in Operation/User.pm in Plain Black WebGUI before 7.3.5 (beta) allows remote attackers to inject ar…
• CVE-2007-0308中 6.8Cross-site scripting (XSS) vulnerability in Plain Black WebGUI before 7.3.4 (beta) allows remote attackers to inject arbitrary web script or…