CVE-2008-3058

概要

参考情報

• octeth.com/blog/category/oempro4
• osvdb.org/ref/50/oempro.txt · Exploit
• osvdb.org/50322
• osvdb.org/50323
• securityfocus.com/bid/32784
• exchange.xforce.ibmcloud.com/vulnerabilities/47112

oempro のその他の脆弱性

• CVE-2019-19740緊急 9.8Octeth Oempro 4.7 and 4.8 allow SQL injection. The parameter CampaignID in Campaign.Get is vulnerable.
• CVE-2008-3059中 4.0member/settings_account.php in Octeth Oempro 3.5.5.1, and possibly other versions before 4, uses cleartext to transmit a password entered in…
• CVE-2008-3057中 5.0Octeth Oempro 3.5.5.1, and possibly other versions before 4, does not set the secure flag for the PHPSESSID cookie in an https session, whic…