CVE-2008-0678

概要

参考情報

• secunia.com/advisories/28756 · Vendor Advisory
• securityfocus.com/bid/27591
• exploit-db.com/exploits/5042

blogphp のその他の脆弱性

• CVE-2008-6745高 7.5index.php in BlogPHP 2.0 allows remote attackers to gain administrator privileges via a crafted email parameter in a register2 action.
• CVE-2008-6631中 4.3Multiple cross-site scripting (XSS) vulnerabilities in index.php in BlogPHP 2.0 allow remote attackers to inject arbitrary web script or HTM…
• CVE-2008-2524中 5.0BlogPHP 2.0 allows remote attackers to bypass authentication, and post (1) messages or (2) comments as an arbitrary user, via a modified blo…
• CVE-2008-0679中 4.3Cross-site scripting (XSS) vulnerability in index.php in BlogPHP 2.0 allows remote attackers to inject arbitrary web script or HTML via the …