CVE-2009-1408

概要

参考情報

• osvdb.org/53782
• secunia.com/advisories/34764 · Vendor Advisory
• securityfocus.com/archive/1/502732/100/0/threaded
• securityfocus.com/bid/34595 · Exploit
• webspell.org/index.php · Patch
• webspell.org/index.php · Patch
• exchange.xforce.ibmcloud.com/vulnerabilities/49937
• exploit-db.com/exploits/8453

webspell のその他の脆弱性

• CVE-2010-4861高 7.5SQL injection vulnerability in asearch.php in webSPELL 4.2.1 allows remote attackers to execute arbitrary SQL commands via the search parame…
• CVE-2009-1912中 6.8Directory traversal vulnerability in src/func/language.php in webSPELL 4.2.0e and earlier allows remote attackers to include and execute arb…
• CVE-2008-1481中 4.3Cross-site scripting (XSS) vulnerability in index.php in webSPELL 4.1.2 allows remote attackers to inject arbitrary web script or HTML via t…
• CVE-2008-0575中 4.3Cross-site request forgery (CSRF) vulnerability in admin/admincenter.php in webSPELL 4.01.02 allows remote attackers to assign the superadmi…
• CVE-2008-0574中 4.3Cross-site scripting (XSS) vulnerability in index.php in webSPELL 4.01.02 allows remote attackers to inject arbitrary web script or HTML via…