CVE-2010-2043

概要

参考情報

• cross-site-scripting.blogspot.com/2010/05/datatrack-system-35-persistent-xss.html · Exploit
• osvdb.org/64727
• packetstormsecurity.org/1005-exploits/datatrackserver35-xss.txt · Exploit
• secunia.com/advisories/39868 · Vendor Advisory
• securityfocus.com/bid/40249
• exchange.xforce.ibmcloud.com/vulnerabilities/58732

datatrack system のその他の脆弱性

• CVE-2010-2079中 5.0DataTrack System 3.5 allows remote attackers to bypass intended restrictions on file extensions, and read arbitrary files, via a trailing ba…
• CVE-2010-2078中 5.0DataTrack System 3.5 allows remote attackers to list the root directory via a (1) /%u0085/ or (2) /%u00A0/ URI.