CVE-2009-0674

概要

参考情報

• ravenphpscripts.com/postt17156.html · Vendor Advisory
• securityfocus.com/archive/1/500988/100/0/threaded
• securityfocus.com/bid/33787
• waraxe.us/advisory-72.html · Exploit
• exchange.xforce.ibmcloud.com/vulnerabilities/48792
• exchange.xforce.ibmcloud.com/vulnerabilities/48983
• exploit-db.com/exploits/8068

ravennuke のその他の脆弱性

• CVE-2009-0679中 4.3Cross-site scripting (XSS) vulnerability in the Your Account module in RavenNuke 2.30 allows remote attackers to inject arbitrary web script…
• CVE-2009-0678中 5.0images/captcha.php in RavenNuke 2.30 allows remote attackers to obtain sensitive information via an aFonts array parameter value that does n…
• CVE-2009-0677中 6.5avatarlist.php in the Your Account module, reached through modules.php, in Raven Web Services RavenNuke 2.30 allows remote authenticated use…
• CVE-2009-0673中 6.5Eval injection vulnerability in the Custom Fields feature in the Your Account module in Raven Web Services RavenNuke 2.30 allows remote auth…
• CVE-2009-0672中 6.5SQL injection vulnerability in the Resend_Email module in Raven Web Services RavenNuke 2.30 allows remote authenticated administrators to ex…