CVE-2009-3788

概要

参考情報

• osvdb.org/59301
• secunia.com/advisories/30750 · Vendor Advisory
• packetstormsecurity.org/0910-exploits/opendocman-sqlxss.txt · Exploit
• securityfocus.com/bid/36777 · Exploit
• exchange.xforce.ibmcloud.com/vulnerabilities/53886

opendocman のその他の脆弱性

• CVE-2019-25684高 8.2OpenDocMan 1.3.4 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting S…
• CVE-2021-45834緊急 9.8An attacker can upload or transfer files of dangerous types to the OpenDocMan 1.4.4 portal via add.php using MIME-bypass, which may be autom…
• CVE-2014-1946高 8.8OpenDocMan 1.2.7 and earlier does not properly validate allowed actions, which allows remote authenticated users to bypass an intended acces…
• CVE-2015-5625中 4.3Cross-site scripting (XSS) vulnerability in OpenDocMan before 1.3.4 allows remote attackers to inject arbitrary web script or HTML via the r…
• CVE-2014-4853中 4.3Cross-site scripting (XSS) vulnerability in odm-init.php in OpenDocMan before 1.2.7.3 allows remote authenticated users to inject arbitrary …