CVE-2009-0678

概要

参考情報

• ravenphpscripts.com/postt17156.html · Vendor Advisory
• securityfocus.com/archive/1/500988/100/0/threaded
• waraxe.us/advisory-72.html · Exploit
• exchange.xforce.ibmcloud.com/vulnerabilities/48792
• exploit-db.com/exploits/8068

ravennuke のその他の脆弱性

• CVE-2009-0679中 4.3Cross-site scripting (XSS) vulnerability in the Your Account module in RavenNuke 2.30 allows remote attackers to inject arbitrary web script…
• CVE-2009-0677中 6.5avatarlist.php in the Your Account module, reached through modules.php, in Raven Web Services RavenNuke 2.30 allows remote authenticated use…
• CVE-2009-0674中 6.0images/captcha.php in Raven Web Services RavenNuke 2.30, when register_globals and display_errors are enabled, allows remote attackers to de…
• CVE-2009-0673中 6.5Eval injection vulnerability in the Custom Fields feature in the Your Account module in Raven Web Services RavenNuke 2.30 allows remote auth…
• CVE-2009-0672中 6.5SQL injection vulnerability in the Resend_Email module in Raven Web Services RavenNuke 2.30 allows remote authenticated administrators to ex…