CVE-2010-1995

概要

参考情報

• holisticinfosec.org/content/view/141/45
• osvdb.org/64550
• secunia.com/advisories/39320 · Vendor Advisory
• secunia.com/secunia_research/2010-59 · Vendor Advisory
• securityfocus.com/archive/1/511272/100/0/threaded
• securityfocus.com/bid/40108
• exchange.xforce.ibmcloud.com/vulnerabilities/58471

tomatocms のその他の脆弱性

• CVE-2010-2282中 5.1Cross-site request forgery (CSRF) vulnerability in TomatoCMS 2.0.6 allows remote attackers to hijack the authentication of administrators fo…
• CVE-2010-2281中 4.3Multiple cross-site scripting (XSS) vulnerabilities in index.php in TomatoCMS 2.0.6 allow remote attackers to inject arbitrary web script or…
• CVE-2010-1515低 2.6Multiple cross-site scripting (XSS) vulnerabilities in index.php in TomatoCMS 2.0.6 and earlier allow remote attackers to inject arbitrary w…
• CVE-2010-1514中 6.0Unrestricted file upload vulnerability in TomatoCMS 2.0.6 and earlier allows remote authenticated users, with certain privileges, to execute…
• CVE-2010-1996低 2.1Multiple cross-site scripting (XSS) vulnerabilities in index.php in TomatoCMS before 2.0.5 allow remote authenticated users, with certain cr…