CVE-2010-4917

概要

参考情報

• packetstormsecurity.org/1009-exploits/ablog-sql.txt
• securityreason.com/securityalert/8450
• exploit-db.com/exploits/14894 · Exploit
• securityfocus.com/bid/42988 · Exploit
• vupen.com/english/advisories/2010/2297 · Vendor Advisory
• exchange.xforce.ibmcloud.com/vulnerabilities/61600

a-blog のその他の脆弱性

• CVE-2008-0677高 7.5SQL injection vulnerability in blog.php in A-Blog 2 allows remote attackers to execute arbitrary SQL commands via the id parameter in a news…
• CVE-2008-0676中 4.3Cross-site scripting (XSS) vulnerability in search.php in A-Blog 2 allows remote attackers to inject arbitrary web script or HTML via the wo…
• CVE-2006-6729中 4.3Cross-site scripting (XSS) vulnerability in a-blog 1.51 and earlier allows remote attackers to inject arbitrary web script or HTML via unspe…
• CVE-2006-5135高 7.5Multiple PHP remote file inclusion vulnerabilities in A-Blog 2 allow remote attackers to execute arbitrary PHP code via a URL in the (1) ope…
• CVE-2006-5092高 7.5PHP remote file inclusion vulnerability in navigation/menu.php in A-Blog 2 allows remote attackers to execute arbitrary PHP code via a URL i…