CVE-2008-0093

概要

参考情報

• secunia.com/advisories/28331 · Vendor Advisory
• digitrustgroup.com/advisories/web-application-security-eticket.html · Exploit
• securityfocus.com/bid/27130
• exchange.xforce.ibmcloud.com/vulnerabilities/39400

eticket のその他の脆弱性

• CVE-2008-5165高 7.5Multiple SQL injection vulnerabilities in eTicket 1.5.7 allow remote attackers to execute arbitrary SQL commands via the pri parameter to (1…
• CVE-2008-0552中 4.3Cross-site scripting (XSS) vulnerability in index.php in eTicket 1.5.6-RC4 allows remote attackers to inject arbitrary web script or HTML vi…
• CVE-2008-0268中 4.3Cross-site scripting (XSS) vulnerability in view.php in eTicket 1.5.5.2 allows remote attackers to inject arbitrary web script or HTML via t…
• CVE-2008-0267高 7.5Multiple SQL injection vulnerabilities in eTicket 1.5.5.2 allow remote authenticated users to execute arbitrary SQL commands via the (1) sta…
• CVE-2008-0266低 2.6Cross-site request forgery (CSRF) vulnerability in admin.php in eTicket 1.5.5.2 allows remote attackers to change the administrative passwor…