CVE-2010-4861

概要

参考情報

• packetstormsecurity.org/1009-exploits/webspell421-sql.txt · Exploit
• securityreason.com/securityalert/8419
• exploit-db.com/exploits/15151 · Exploit
• securityfocus.com/bid/43579 · Exploit
• webspell.org/index.php · Patch
• exchange.xforce.ibmcloud.com/vulnerabilities/62130

webspell のその他の脆弱性

• CVE-2009-1912中 6.8Directory traversal vulnerability in src/func/language.php in webSPELL 4.2.0e and earlier allows remote attackers to include and execute arb…
• CVE-2009-1408中 4.3Cross-site scripting (XSS) vulnerability in webSPELL 4.2.0c allows remote attackers to inject arbitrary web script or HTML allows remote att…
• CVE-2008-1481中 4.3Cross-site scripting (XSS) vulnerability in index.php in webSPELL 4.1.2 allows remote attackers to inject arbitrary web script or HTML via t…
• CVE-2008-0575中 4.3Cross-site request forgery (CSRF) vulnerability in admin/admincenter.php in webSPELL 4.01.02 allows remote attackers to assign the superadmi…
• CVE-2008-0574中 4.3Cross-site scripting (XSS) vulnerability in index.php in webSPELL 4.01.02 allows remote attackers to inject arbitrary web script or HTML via…