CVE-2008-6634

概要

参考情報

• secunia.com/advisories/30376 · Vendor Advisory
• securityfocus.com/bid/29380 · Exploit
• exchange.xforce.ibmcloud.com/vulnerabilities/42626
• exploit-db.com/exploits/5675

roomphplanning のその他の脆弱性

• CVE-2009-4671高 7.5Login.php in RoomPHPlanning 1.6 allows remote attackers to bypass authentication and obtain administrative access by setting the room_phplan…
• CVE-2009-4670高 7.5admin/delitem.php in RoomPHPlanning 1.6 does not require authentication, which allows remote attackers to (1) delete arbitrary users via the…
• CVE-2009-4669高 7.5Multiple SQL injection vulnerabilities in RoomPHPlanning 1.6 allow remote attackers to execute arbitrary SQL commands via (1) the loginus pa…
• CVE-2008-6633高 7.5SQL injection vulnerability in RoomPHPlanning 1.5 allows remote attackers to execute arbitrary SQL commands via the idresa parameter to resa…
• CVE-2008-2488中 6.5admin/userform.php in RoomPHPlanning 1.5 does not require administrative credentials, which allows remote authenticated users to create new …