CVE-2009-4221

概要

参考情報

• packetstormsecurity.org/0911-exploits/phpbazar211fix-sql.txt · Exploit
• exploit-db.com/exploits/10245 · Exploit
• securityfocus.com/bid/37144 · Exploit
• exchange.xforce.ibmcloud.com/vulnerabilities/54447

phpbazar のその他の脆弱性

• CVE-2010-2315高 7.5PHP remote file inclusion vulnerability in picturelib.php in SmartISoft phpBazar 2.1.1 allows remote attackers to execute arbitrary PHP code…
• CVE-2009-4222高 7.5phpBazar 2.1.1fix and earlier does not require administrative authentication for admin/admin.php, which allows remote attackers to obtain ac…
• CVE-2008-3767高 7.5SQL injection vulnerability in classified.php in phpBazar 2.0.2 allows remote attackers to execute arbitrary SQL commands via the adid param…
• CVE-2006-2528中 6.4PHP remote file inclusion vulnerability in classified_right.php in phpBazar 2.1.0 and earlier allows remote attackers to execute arbitrary P…
• CVE-2006-2527高 7.5Admin/admin.php in phpBazar 2.1.0 and earlier allows remote attackers to bypass the authentication process and gain unauthorized access to t…