CVE-2008-2524

概要

参考情報

• secunia.com/advisories/30165 · Vendor Advisory
• davidsopas.com/soapbox/blogphp.txt
• securityfocus.com/bid/29133
• exchange.xforce.ibmcloud.com/vulnerabilities/42372

blogphp のその他の脆弱性

• CVE-2008-6745高 7.5index.php in BlogPHP 2.0 allows remote attackers to gain administrator privileges via a crafted email parameter in a register2 action.
• CVE-2008-6631中 4.3Multiple cross-site scripting (XSS) vulnerabilities in index.php in BlogPHP 2.0 allow remote attackers to inject arbitrary web script or HTM…
• CVE-2008-0679中 4.3Cross-site scripting (XSS) vulnerability in index.php in BlogPHP 2.0 allows remote attackers to inject arbitrary web script or HTML via the …
• CVE-2008-0678中 6.8SQL injection vulnerability in index.php in BlogPHP 2.0 allows remote attackers to execute arbitrary SQL commands via the id parameter in a …