CVE-2011-0508

概要

参考情報

• dev.contao.org/issues/2751
• secunia.com/advisories/42899 · Vendor Advisory
• contao.org/changelog.html · Patch
• contao.org/news/items/contao-2_9_3.html · Patch
• osvdb.org/70440
• securityfocus.com/archive/1/515691/100/0/threaded
• exchange.xforce.ibmcloud.com/vulnerabilities/64679

contao cms のその他の脆弱性

• CVE-2014-1860緊急 9.8Contao CMS through 3.2.4 has PHP Object Injection Vulnerabilities
• CVE-2017-16558緊急 9.8Contao 3.0.0 to 3.5.30 and 4.0.0 to 4.4.7 contains an SQL injection vulnerability in the back end as well as in the listing module.
• CVE-2019-10643緊急 9.8Contao 4.7 allows Use of a Key Past its Expiration Date.
• CVE-2019-10642高 8.8Contao 4.7 allows CSRF.
• CVE-2019-10641緊急 9.8Contao before 3.5.39 and 4.x before 4.7.3 has a Weak Password Recovery Mechanism for a Forgotten Password.