CVE-2008-6044

概要

参考情報

• majorsecurity.de/index_2.php · Exploit
• securityfocus.com/archive/1/496583/100/0/threaded · Third Party Advisory
• securityfocus.com/bid/31313 · Exploit
• exchange.xforce.ibmcloud.com/vulnerabilities/45340 · VDB Entry

xt-commerce のその他の脆弱性

• CVE-2020-12101中 4.3The address-management feature in xt:Commerce 5.1 to 6.2.2 allows remote authenticated users to zero out other user's stored addresses by ma…
• CVE-2011-5011中 6.8Multiple cross-site request forgery (CSRF) vulnerabilities in xt:Commerce 3.0.4 SP2.1 and possibly earlier allow remote attackers to hijack …
• CVE-2010-1359中 6.8SQL injection vulnerability in bluegate_seo.inc.php in the Direct URL module for xt:Commerce, when magic_quotes_gpc is disabled, allows remo…
• CVE-2008-6304中 6.8SQL injection vulnerability in xt:Commerce before 3.0.4 Sp2.1, when magic_quotes_gpc is enabled and the SEO URLs are activated, allows remot…
• CVE-2008-6045中 6.8Session fixation vulnerability in shopping_cart.php in xt:Commerce 3.0.4 and earlier allows remote attackers to hijack web sessions by setti…