CVE-2009-4669

概要

参考情報

• secunia.com/advisories/35237 · Vendor Advisory
• exploit-db.com/exploits/8797

roomphplanning のその他の脆弱性

• CVE-2009-4671高 7.5Login.php in RoomPHPlanning 1.6 allows remote attackers to bypass authentication and obtain administrative access by setting the room_phplan…
• CVE-2009-4670高 7.5admin/delitem.php in RoomPHPlanning 1.6 does not require authentication, which allows remote attackers to (1) delete arbitrary users via the…
• CVE-2008-6634高 7.5SQL injection vulnerability in RoomPHPlanning 1.5 allows remote attackers to execute arbitrary SQL commands via the idroom parameter to week…
• CVE-2008-6633高 7.5SQL injection vulnerability in RoomPHPlanning 1.5 allows remote attackers to execute arbitrary SQL commands via the idresa parameter to resa…
• CVE-2008-2488中 6.5admin/userform.php in RoomPHPlanning 1.5 does not require administrative credentials, which allows remote authenticated users to create new …