CVE-2008-5165

概要

参考情報

• secunia.com/advisories/30877 · Vendor Advisory
• digitrustgroup.com/advisories/web-application-security-eticket2.html · Exploit
• eticketsupport.com/announcements/170_is_in_the_building-t91.0.html · Vendor Advisory
• securityfocus.com/bid/29973
• securitytracker.com/id
• exchange.xforce.ibmcloud.com/vulnerabilities/43398

eticket のその他の脆弱性

• CVE-2008-0552中 4.3Cross-site scripting (XSS) vulnerability in index.php in eTicket 1.5.6-RC4 allows remote attackers to inject arbitrary web script or HTML vi…
• CVE-2008-0268中 4.3Cross-site scripting (XSS) vulnerability in view.php in eTicket 1.5.5.2 allows remote attackers to inject arbitrary web script or HTML via t…
• CVE-2008-0267高 7.5Multiple SQL injection vulnerabilities in eTicket 1.5.5.2 allow remote authenticated users to execute arbitrary SQL commands via the (1) sta…
• CVE-2008-0266低 2.6Cross-site request forgery (CSRF) vulnerability in admin.php in eTicket 1.5.5.2 allows remote attackers to change the administrative passwor…
• CVE-2008-0093中 4.3Multiple cross-site scripting (XSS) vulnerabilities in newticket.php in eTicket 1.5.5.2, and 1.5.6 RC2 and RC3, allow remote attackers to in…