CVE-2008-1993

概要

参考情報

• bugreport.ir/index.php · Exploit
• securityreason.com/securityalert/3842
• securityfocus.com/archive/1/491129/100/0/threaded
• securityfocus.com/bid/28868 · Exploit
• exchange.xforce.ibmcloud.com/vulnerabilities/41922
• exploit-db.com/exploits/5478

acidcat cms のその他の脆弱性

• CVE-2012-0933低 2.6Multiple cross-site scripting (XSS) vulnerabilities in Acidcat CMS 3.5.1, 3.5.2, 3.5.6, and possibly earlier allow remote attackers to injec…
• CVE-2010-0984中 5.0Acidcat CMS 3.5.3 and earlier stores sensitive information under the web root with insufficient access control, which allows remote attacker…
• CVE-2010-0976高 7.5Acidcat CMS 3.5.x does not prevent access to install.asp after installation finishes, which might allow remote attackers to restart the inst…
• CVE-2008-1992高 7.5Acidcat CMS 3.4.1 does not properly restrict access to (1) default_mail_aspemail.asp, (2) default_mail_cdosys.asp or (3) default_mail_jmail.…
• CVE-2008-1991中 4.3Cross-site scripting (XSS) vulnerability in admin_colors_swatch.asp in Acidcat CMS 3.4.1 allows remote attackers to inject arbitrary web scr…