CVE-2010-3206

概要

参考情報

• packetstormsecurity.org/1008-exploits/diycms-rfi.txt · Exploit
• exploit-db.com/exploits/14822 · Exploit
• exchange.xforce.ibmcloud.com/vulnerabilities/61454

diy-cms のその他の脆弱性

• CVE-2012-6519高 7.5SQL injection vulnerability in modules/poll/index.php in DIY-CMS 1.0 allows remote attackers to execute arbitrary SQL commands via the start…
• CVE-2012-6518中 6.8Cross-site request forgery (CSRF) vulnerability in mod.php in DiY-CMS 1.0 allows remote attackers to hijack the authentication of administra…
• CVE-2012-6517中 4.3Multiple cross-site scripting (XSS) vulnerabilities in DiY-CMS 1.0 allow remote attackers to inject arbitrary web script or HTML via the (1)…