CVE-2010-0712

概要

参考情報

• dev.zenoss.org/trac/changeset/15257 · Vendor Advisory
• osvdb.org/61804
• secunia.com/advisories/38195 · Vendor Advisory
• ngenuity.org/wordpress/2010/01/14/ngenuity-2010-001-zenoss-getjsoneventsinfo-sql-injection
• securityfocus.com/bid/37802 · Exploit
• zenoss.com/news/SQL-Injection-and-Cross-Site-Forgery-in-Zenoss-Core-Corrected.html · Vendor Advisory
• exchange.xforce.ibmcloud.com/vulnerabilities/55670

zenoss のその他の脆弱性

• CVE-2019-14258高 7.5The XML-RPC subsystem in Zenoss 2.5.3 allows XXE attacks that lead to unauthenticated information disclosure via port 9988.
• CVE-2019-14257高 7.8pyraw in Zenoss 2.5.3 allows local privilege escalation by modifying environment variables to redirect execution before privileges are dropp…
• CVE-2014-3739中 5.8Open redirect vulnerability in zport/acl_users/cookieAuthHelper/login_form in Zenoss 4.2.5 allows remote attackers to redirect users to arbi…
• CVE-2014-3738中 4.3Cross-site scripting (XSS) vulnerability in Zenoss 4.2.5 allows remote attackers to inject arbitrary web script or HTML via the title of a d…
• CVE-2010-0713中 6.8Multiple cross-site request forgery (CSRF) vulnerabilities in Zenoss 2.3.3, and other versions before 2.5, allow remote attackers to hijack …