CVE-2008-6304

概要

参考情報

• secunia.com/advisories/32830 · Vendor Advisory
• securityfocus.com/bid/32398 · Third Party Advisory
• xt-commerce.com/blog/xtcommerce-news/sicherheitspatch-fuer-version-304-sp21.html · Patch
• exchange.xforce.ibmcloud.com/vulnerabilities/46757 · VDB Entry

xt-commerce のその他の脆弱性

• CVE-2020-12101中 4.3The address-management feature in xt:Commerce 5.1 to 6.2.2 allows remote authenticated users to zero out other user's stored addresses by ma…
• CVE-2011-5011中 6.8Multiple cross-site request forgery (CSRF) vulnerabilities in xt:Commerce 3.0.4 SP2.1 and possibly earlier allow remote attackers to hijack …
• CVE-2010-1359中 6.8SQL injection vulnerability in bluegate_seo.inc.php in the Direct URL module for xt:Commerce, when magic_quotes_gpc is disabled, allows remo…
• CVE-2008-6045中 6.8Session fixation vulnerability in shopping_cart.php in xt:Commerce 3.0.4 and earlier allows remote attackers to hijack web sessions by setti…
• CVE-2008-6044中 4.3Cross-site scripting (XSS) vulnerability in advanced_search_result.php in xt:Commerce 3.0.4 and earlier allows remote attackers to inject ar…