CVE-2009-3171

概要

参考情報

• packetstormsecurity.org/0909-exploits/gazellecms-xss.txt · Exploit
• secunia.com/advisories/33686 · Vendor Advisory
• exploit-db.com/exploits/9425
• vupen.com/english/advisories/2009/2541 · Vendor Advisory
• exchange.xforce.ibmcloud.com/vulnerabilities/52415

gazelle cms のその他の脆弱性

• CVE-2009-3182中 6.8Unrestricted file upload vulnerability in admin/editor/filemanager/browser.html in Anantasoft Gazelle CMS 1.0 allows remote attackers to exe…
• CVE-2009-3181中 5.0Directory traversal vulnerability in Anantasoft Gazelle CMS 1.0 allows remote attackers to overwrite arbitrary files via a .. (dot dot) in t…
• CVE-2009-3180高 7.5Anantasoft Gazelle CMS 1.0 allows remote attackers to conduct a password reset for other users via a modified user parameter to renew.php.
• CVE-2009-3167中 4.3Directory traversal vulnerability in index.php in Anantasoft Gazelle CMS 1.0, when magic_quotes_gpc is disabled, allows remote attackers to …