CVE-2008-4590

概要

参考情報

• securityreason.com/securityalert/4413
• securityfocus.com/bid/31687 · Exploit
• exchange.xforce.ibmcloud.com/vulnerabilities/45799
• exploit-db.com/exploits/6714

stash のその他の脆弱性

• CVE-2008-4081高 7.5admin/login.php in Stash 1.0.3 allows remote attackers to bypass authentication and gain administrative access by setting a bsm cookie.
• CVE-2008-4080中 6.8SQL injection vulnerability in Stash 1.0.3, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via…