CVE-2009-4570

概要

参考情報

• secunia.com/advisories/31948 · Vendor Advisory
• andreafabrizi.it · Exploit
• securityfocus.com/archive/1/508270/100/0/threaded
• securityfocus.com/bid/37227 · Exploit
• exchange.xforce.ibmcloud.com/vulnerabilities/54589

phpshop のその他の脆弱性

• CVE-2011-1069中 6.1PHPShop through 0.8.1 has XSS.
• CVE-2010-4836中 4.3Cross-site scripting (XSS) vulnerability in register.html in PHPShop 2.1 EE and earlier allows remote attackers to inject arbitrary web scri…
• CVE-2009-4572中 6.8Cross-site request forgery (CSRF) vulnerability in PhpShop 0.8.1 allows remote attackers to hijack the authentication of arbitrary users for…
• CVE-2009-4571高 7.5Multiple SQL injection vulnerabilities in index.php in PhpShop 0.8.1 allow remote attackers to execute arbitrary SQL commands via the (1) mo…
• CVE-2008-0681中 6.8SQL injection vulnerability in index.php in PHPShop 0.8.1 allows remote attackers to execute arbitrary SQL commands via the product_id param…