CVE-2008-0574

概要

参考情報

• secunia.com/advisories/28684 · Vendor Advisory
• securityreason.com/securityalert/3606
• securityfocus.com/archive/1/487312/100/0/threaded
• securityfocus.com/bid/27517 · Exploit
• exchange.xforce.ibmcloud.com/vulnerabilities/40084

webspell のその他の脆弱性

• CVE-2010-4861高 7.5SQL injection vulnerability in asearch.php in webSPELL 4.2.1 allows remote attackers to execute arbitrary SQL commands via the search parame…
• CVE-2009-1912中 6.8Directory traversal vulnerability in src/func/language.php in webSPELL 4.2.0e and earlier allows remote attackers to include and execute arb…
• CVE-2009-1408中 4.3Cross-site scripting (XSS) vulnerability in webSPELL 4.2.0c allows remote attackers to inject arbitrary web script or HTML allows remote att…
• CVE-2008-1481中 4.3Cross-site scripting (XSS) vulnerability in index.php in webSPELL 4.1.2 allows remote attackers to inject arbitrary web script or HTML via t…
• CVE-2008-0575中 4.3Cross-site request forgery (CSRF) vulnerability in admin/admincenter.php in webSPELL 4.01.02 allows remote attackers to assign the superadmi…