CVE-2008-0681

概要

参考情報

• securityreason.com/securityalert/3628
• securityfocus.com/archive/1/487435/100/0/threaded
• securityfocus.com/bid/27570
• exploit-db.com/exploits/5041

phpshop のその他の脆弱性

• CVE-2011-1069中 6.1PHPShop through 0.8.1 has XSS.
• CVE-2010-4836中 4.3Cross-site scripting (XSS) vulnerability in register.html in PHPShop 2.1 EE and earlier allows remote attackers to inject arbitrary web scri…
• CVE-2009-4572中 6.8Cross-site request forgery (CSRF) vulnerability in PhpShop 0.8.1 allows remote attackers to hijack the authentication of arbitrary users for…
• CVE-2009-4571高 7.5Multiple SQL injection vulnerabilities in index.php in PhpShop 0.8.1 allow remote attackers to execute arbitrary SQL commands via the (1) mo…
• CVE-2009-4570中 4.3Cross-site scripting (XSS) vulnerability in PhpShop 0.8.1 allows remote attackers to inject arbitrary web script or HTML via the order_id pa…