CVE-2008-2350

概要

参考情報

• lostmon.blogspot.com/2008/05/bcoos-highlightphp-traversal-file.html · Exploit
• secunia.com/advisories/30035 · Vendor Advisory
• securityfocus.com/bid/29275 · Exploit
• exchange.xforce.ibmcloud.com/vulnerabilities/42506

bcoos のその他の脆弱性

• CVE-2008-7036中 4.3Multiple cross-site scripting (XSS) vulnerabilities in index.php in DevTracker module 3.0 for bcoos 1.1.11 and earlier, and DevTracker modul…
• CVE-2008-6381中 4.6SQL injection vulnerability in modules/adresses/viewcat.php in bcoos 1.0.13, and possibly earlier, allows remote authenticated users with Ad…
• CVE-2007-6275高 7.5SQL injection vulnerability in modules/adresses/ratefile.php in bcoos 1.0.10 and earlier allows remote attackers to execute arbitrary SQL co…
• CVE-2007-6274中 4.3Multiple cross-site scripting (XSS) vulnerabilities in modules/ecal/display.php in the Event Calendar in bcoos 1.0.10 and earlier allow remo…
• CVE-2007-6266高 7.5Multiple SQL injection vulnerabilities in bcoos 1.0.10 and earlier allow remote attackers to execute arbitrary SQL commands via (1) the gid …