CVE-2010-5059

概要

参考情報

• packetstormsecurity.org/1004-exploits/cmscout-sql.txt
• secunia.com/advisories/39602 · Vendor Advisory
• exploit-db.com/exploits/12407 · Exploit
• securityfocus.com/bid/39707 · Exploit
• vupen.com/english/advisories/2010/0998 · Vendor Advisory

cmscout のその他の脆弱性

• CVE-2010-2154中 4.3Cross-site scripting (XSS) vulnerability in the Search Site in CMScout 2.09, and possibly other versions, allows remote attackers to inject …
• CVE-2008-6726中 6.0Multiple directory traversal vulnerabilities in CMScout 2.06, when register_globals is enabled, allow remote attackers to include and execut…
• CVE-2008-6725中 6.0Multiple SQL injection vulnerabilities in CMScout 2.06 allow remote authenticated users to execute arbitrary SQL commands via the id paramet…
• CVE-2008-3415高 7.5Directory traversal vulnerability in common.php in CMScout 2.05, when .htaccess is not supported, allows remote attackers to include and exe…
• CVE-2007-3812高 7.5SQL injection vulnerability in forums.php in CMScout 1.23 and earlier allows remote attackers to execute arbitrary SQL commands via the f pa…