CVE-2009-0672

概要

参考情報

• osvdb.org/52298
• ravenphpscripts.com/postt17156.html
• securityfocus.com/archive/1/500988/100/0/threaded
• securityfocus.com/bid/33787 · Patch
• waraxe.us/advisory-72.html · Exploit
• exchange.xforce.ibmcloud.com/vulnerabilities/48791
• exploit-db.com/exploits/8068

ravennuke のその他の脆弱性

• CVE-2009-0679中 4.3Cross-site scripting (XSS) vulnerability in the Your Account module in RavenNuke 2.30 allows remote attackers to inject arbitrary web script…
• CVE-2009-0678中 5.0images/captcha.php in RavenNuke 2.30 allows remote attackers to obtain sensitive information via an aFonts array parameter value that does n…
• CVE-2009-0677中 6.5avatarlist.php in the Your Account module, reached through modules.php, in Raven Web Services RavenNuke 2.30 allows remote authenticated use…
• CVE-2009-0674中 6.0images/captcha.php in Raven Web Services RavenNuke 2.30, when register_globals and display_errors are enabled, allows remote attackers to de…
• CVE-2009-0673中 6.5Eval injection vulnerability in the Custom Fields feature in the Your Account module in Raven Web Services RavenNuke 2.30 allows remote auth…