CVE-2010-4855

概要

参考情報

• packetstormsecurity.org/1010-exploits/xweblog22-sql.txt · Exploit
• secunia.com/advisories/41708 · Vendor Advisory
• securityreason.com/securityalert/8414
• exploit-db.com/exploits/15218 · Exploit

xweblog のその他の脆弱性

• CVE-2010-4856高 7.5SQL injection vulnerability in arsiv.asp in xWeblog 2.2 allows remote attackers to execute arbitrary SQL commands via the tarih parameter.
• CVE-2006-5023高 7.5SQL injection vulnerability in kategori.asp in xweblog 2.1 and earlier allows remote attackers to execute arbitrary SQL commands via the kat…