CVE-2008-4157

概要

参考情報

• osvdb.org/show/osvdb/48018
• packetstormsecurity.com/files/122746/PHP-VID-XSS-SQL-Injection-CRLF-Injection.html · Exploit
• packetstormsecurity.com/files/130754/Vastal-I-tech-phpVID-1.2.3-SQL-Injection.html
• seclists.org/fulldisclosure/2015/Mar/58
• secunia.com/advisories/31761 · Vendor Advisory
• securityreason.com/securityalert/4291
• tetraph.com/security/sql-injection-vulnerability/vastal-i-tech-phpvid-1-2-3-sql-injection-security-vulnerabilities
• exploit-db.com/exploits/27519 · Exploit
• securityfocus.com/bid/31108
• vupen.com/english/advisories/2008/2552
• exchange.xforce.ibmcloud.com/vulnerabilities/45028
• exploit-db.com/exploits/6422

phpvid のその他の脆弱性

• CVE-2015-2563高 7.5SQL injection vulnerability in groups.php in Vastal I-Tech phpVID 0.9.9 and 1.2.3 allows remote attackers to execute arbitrary SQL commands …
• CVE-2013-5312中 4.3Multiple cross-site scripting (XSS) vulnerabilities in Vastal I-Tech phpVID 1.2.3 allow remote attackers to inject arbitrary web script or H…
• CVE-2013-5311高 7.5Multiple SQL injection vulnerabilities in Vastal I-Tech phpVID 1.2.3 allow remote attackers to execute arbitrary SQL commands via the "n" pa…
• CVE-2008-2335中 4.3Cross-site scripting (XSS) vulnerability in search_results.php in Vastal I-Tech phpVID 1.1 and 1.2 allows remote attackers to inject arbitra…