CVE-2008-3735

概要

参考情報

• lostmon.blogspot.com/2008/08/phpizabi-v0848b-traversal-file-access.html · Exploit
• packetstormsecurity.org/0808-exploits/phpizabi-traverse.txt · Exploit
• exchange.xforce.ibmcloud.com/vulnerabilities/44691

phpizabi のその他の脆弱性

• CVE-2008-3723中 6.3Directory traversal vulnerability in index.php in PHPizabi 0.848b C1 HFP3 allows remote authenticated administrators to read arbitrary files…
• CVE-2008-3239緊急 9.3Unrestricted file upload vulnerability in the writeLogEntry function in system/v_cron_proc.php in PHPizabi 0.848b C1 HFP1, when register_glo…
• CVE-2008-2018中 4.0The AssignUser function in template.class.php in PHPizabi 0.848b C1 HFP3 performs unsafe macro expansions on strings delimited by '{' and '}…