CVE-2009-0918

概要

参考情報

• ptk.dflabs.com/faq.html · Patch
• ptk.dflabs.com/security.html · Patch
• kb.cert.org/vuls/id/845747 · US Government Resource
• kb.cert.org/vuls/id/RGII-7Q4GBJ · US Government Resource
• securityfocus.com/bid/34111
• exchange.xforce.ibmcloud.com/vulnerabilities/49235

ptk のその他の脆弱性

• CVE-2012-1415中 6.8Cross-site request forgery (CSRF) vulnerability in lib/logout.php in DFLabs PTK 1.0.5 and earlier allows remote attackers to hijack the auth…
• CVE-2012-5902中 4.3Cross-site scripting (XSS) vulnerability in ptk/lib/modal_bookmark.php in DFLabs PTK 1.0.5 allows remote attackers to inject arbitrary web s…
• CVE-2012-5901中 5.0DFLabs PTK 1.0.5 stores data files with predictable names under the web document root with insufficient access control, which allows remote …
• CVE-2008-6793中 6.8The get_file_type function in lib/file_content.php in DFLabs PTK 0.1, 0.2, and 1.0 allows remote attackers to execute arbitrary commands via…
• CVE-2009-0917中 4.3Cross-site scripting (XSS) vulnerability in DFLabs PTK 1.0.0 through 1.0.4 allows remote attackers to inject arbitrary web script or HTML by…