CVE-2008-2428

概要

参考情報

• secunia.com/advisories/30565 · Vendor Advisory
• secunia.com/secunia_research/2008-15/advisory · Vendor Advisory
• sourceforge.net/project/shownotes.php
• securityfocus.com/archive/1/493434/100/0/threaded
• securityfocus.com/bid/29787
• torrenttrader.org/index.php
• exchange.xforce.ibmcloud.com/vulnerabilities/43165

torrenttrader classic のその他の脆弱性

• CVE-2009-2161中 5.1Directory traversal vulnerability in backend/admin-functions.php in TorrentTrader Classic 1.09, when used on a case-insensitive web site, al…
• CVE-2009-2160中 5.0TorrentTrader Classic 1.09 allows remote attackers to (1) obtain configuration information via a direct request to phpinfo.php, which calls …
• CVE-2009-2159中 6.4backup-database.php in TorrentTrader Classic 1.09 does not require administrative authentication, which allows remote attackers to create an…
• CVE-2009-2157中 6.5Multiple SQL injection vulnerabilities in TorrentTrader Classic 1.09 allow remote authenticated users to execute arbitrary SQL commands via …
• CVE-2009-2156低 3.5Multiple cross-site scripting (XSS) vulnerabilities in TorrentTrader Classic 1.09 allow remote authenticated users to inject arbitrary web s…