CVE-2008-3365

概要

参考情報

• secunia.com/advisories/31239 · Vendor Advisory
• securityreason.com/securityalert/4062
• pixelpost.org/blog/2008/07/27/pixelpost-171-security-patch · Patch
• securityfocus.com/archive/1/494817/100/0/threaded
• securityfocus.com/bid/30397 · Exploit
• vupen.com/english/advisories/2008/2207/references
• exchange.xforce.ibmcloud.com/vulnerabilities/44031
• exploit-db.com/exploits/6150

pixelpost のその他の脆弱性

• CVE-2010-3305高 8.8Cross-site request forgery (CSRF) vulnerability in pixelpost 1.7.3 could allow remote attackers to change the admin password.
• CVE-2009-4900中 6.1pixelpost 1.7.1 has XSS
• CVE-2009-4899緊急 9.8pixelpost 1.7.1 has SQL injection
• CVE-2018-0606高 7.2SQL injection vulnerability in the Pixelpost v1.7.3 and earlier allows remote authenticated attackers to execute arbitrary SQL commands via …
• CVE-2018-0605中 6.1Cross-site scripting vulnerability in Pixelpost v1.7.3 and earlier allows remote attackers to inject arbitrary web script or HTML via unspec…