CVE-2008-0677

概要

参考情報

• securityfocus.com/bid/27594
• exploit-db.com/exploits/5050

a-blog のその他の脆弱性

• CVE-2010-4917高 7.5SQL injection vulnerability in sources/search.php in A-Blog 2.0 allows remote attackers to execute arbitrary SQL commands via the words para…
• CVE-2008-0676中 4.3Cross-site scripting (XSS) vulnerability in search.php in A-Blog 2 allows remote attackers to inject arbitrary web script or HTML via the wo…
• CVE-2006-6729中 4.3Cross-site scripting (XSS) vulnerability in a-blog 1.51 and earlier allows remote attackers to inject arbitrary web script or HTML via unspe…
• CVE-2006-5135高 7.5Multiple PHP remote file inclusion vulnerabilities in A-Blog 2 allow remote attackers to execute arbitrary PHP code via a URL in the (1) ope…
• CVE-2006-5092高 7.5PHP remote file inclusion vulnerability in navigation/menu.php in A-Blog 2 allows remote attackers to execute arbitrary PHP code via a URL i…