CVE-2007-6587

概要

参考情報

• attrition.org/pipermail/vim/2012-May/002556.html
• dev.plogger.org/changeset/489
• packetstormsecurity.com/files/112947/Plogger-Photo-Gallery-SQL-Injection.html
• packetstormsecurity.org/files/112947/Plogger-Photo-Gallery-SQL-Injection.html
• mwrinfosecurity.com/publications/mwri_plogger-photo-gallery-sql-injection-vulnerability_2007-12-17.pdf · Exploit
• osvdb.org/39764
• securityfocus.com/bid/26958
• securityfocus.com/bid/53644
• exchange.xforce.ibmcloud.com/vulnerabilities/75789
• labs.mwrinfosecurity.com/advisories/2007/12/17/plogger-sql-injection

plogger のその他の脆弱性

• CVE-2014-2224中 5.0Plogger 1.0 RC1 and earlier, when the Lucid theme is used, does not assign new values for certain codes, which makes it easier for remote at…
• CVE-2014-2223高 7.5Unrestricted file upload vulnerability in plog-admin/plog-upload.php in Plogger 1.0 RC1 and earlier allows remote authenticated users to exe…
• CVE-2012-5289高 7.5Multiple SQL injection vulnerabilities in Plogger 1.0 RC1 allow remote attackers to execute arbitrary SQL commands via the id parameter to (…
• CVE-2008-3563高 7.5Multiple SQL injection vulnerabilities in Plogger 3.0 and earlier allow remote attackers to execute arbitrary SQL commands via (1) the check…
• CVE-2006-2157高 7.5SQL injection vulnerability in gallery.php in Plogger Beta 2.1 and earlier allows remote attackers to execute arbitrary SQL commands via the…