CVE-2010-2852

概要

参考情報

• cross-site-scripting.blogspot.com/2010/07/runcms-21-magpie-rss-module-reflected.html · Exploit
• osvdb.org/66244 · Exploit
• secunia.com/advisories/40521 · Vendor Advisory
• securityfocus.com/bid/41551 · Exploit
• exchange.xforce.ibmcloud.com/vulnerabilities/60224

runcms のその他の脆弱性

• CVE-2009-3815中 5.0RunCMS 2M1, when running with certain error_reporting levels, allows remote attackers to obtain sensitive information via (1) the op[] param…
• CVE-2009-3814中 6.5Static code injection vulnerability in RunCMS 2M1 allows remote authenticated administrators to execute arbitrary PHP code via the "Filter/B…
• CVE-2009-3813中 6.5Multiple SQL injection vulnerabilities in RunCMS 2M1 allow remote authenticated users to execute arbitrary SQL commands via the (1) forum pa…
• CVE-2009-3804中 6.5Multiple SQL injection vulnerabilities in modules/forum/post.php in RunCMS 2M1 allow remote authenticated users to execute arbitrary SQL com…
• CVE-2008-7222中 4.3Cross-site scripting (XSS) vulnerability in system/admin.php in RunCMS 1.6.1 allows remote attackers to inject arbitrary web script or HTML …