CVE-2008-2335

概要

参考情報

• holisticinfosec.org/content/view/65/45
• osvdb.org/show/osvdb/45171
• packetstormsecurity.com/files/122746/PHP-VID-XSS-SQL-Injection-CRLF-Injection.html
• packetstormsecurity.com/files/130755/Vastal-I-tech-phpVID-1.2.3-Cross-Site-Scripting.html · Exploit
• seclists.org/fulldisclosure/2015/Mar/59 · Exploit
• secunia.com/advisories/30152 · Vendor Advisory
• tetraph.com/security/xss-vulnerability/vastal-i-tech-phpvid-1-2-3-multiple-xss-cross-site-scripting-security-vulnerabilities
• exploit-db.com/exploits/27519
• securityfocus.com/bid/29238
• vupen.com/english/advisories/2008/2552
• exchange.xforce.ibmcloud.com/vulnerabilities/42450
• exploit-db.com/exploits/6422

phpvid のその他の脆弱性

• CVE-2015-2563高 7.5SQL injection vulnerability in groups.php in Vastal I-Tech phpVID 0.9.9 and 1.2.3 allows remote attackers to execute arbitrary SQL commands …
• CVE-2013-5312中 4.3Multiple cross-site scripting (XSS) vulnerabilities in Vastal I-Tech phpVID 1.2.3 allow remote attackers to inject arbitrary web script or H…
• CVE-2013-5311高 7.5Multiple SQL injection vulnerabilities in Vastal I-Tech phpVID 1.2.3 allow remote attackers to execute arbitrary SQL commands via the "n" pa…
• CVE-2008-4157高 7.5SQL injection vulnerability in groups.php in Vastal I-Tech phpVID 1.1 allows remote attackers to execute arbitrary SQL commands via the cat …