CVE-2008-1398

概要

参考情報

• securityfocus.com/bid/28257 · Exploit
• exchange.xforce.ibmcloud.com/vulnerabilities/41217
• exploit-db.com/exploits/5256

auracms のその他の脆弱性

• CVE-2018-16338高 8.8An issue was discovered in AuraCMS 2.3. There is a CSRF vulnerability that can change the administrator's password via admin.php?mod=users a…
• CVE-2018-15199中 5.4AuraCMS 2.3 allows XSS via a Bukutamu -> AddGuestbook action.
• CVE-2014-3975中 5.0Absolute path traversal vulnerability in filemanager.php in AuraCMS 3.0 allows remote attackers to list a directory via a full pathname in t…
• CVE-2014-3974中 4.3Cross-site scripting (XSS) vulnerability in filemanager.php in AuraCMS 3.0 and earlier allows remote attackers to inject arbitrary web scrip…
• CVE-2014-1401中 6.5Multiple SQL injection vulnerabilities in AuraCMS 2.3 and earlier allow remote authenticated users to execute arbitrary SQL commands via the…