CVE-2011-0526

概要

参考情報

• openwall.com/lists/oss-security/2011/01/27/2 · Exploit
• openwall.com/lists/oss-security/2011/01/27/5 · Exploit
• secunia.com/advisories/43074 · Vendor Advisory
• osvdb.org/70677 · Exploit
• vanillaforums.org/discussion/14397/vanilla-2.0.17-released
• yehg.net/lab/pr0js/advisories/%5Bvanilla_forums-2.0.16%5D_cross_site_scripting · Exploit

vanilla のその他の脆弱性

• CVE-2020-8825中 5.4index.php?p=/dashboard/settings/branding in Vanilla 2.6.3 allows stored XSS.
• CVE-2011-1009中 6.1Vanilla Forums 2.0.17.1 through 2.0.17.5 has XSS in /vanilla/index.php via the p parameter.
• CVE-2011-3614緊急 9.8An Access Control vulnerability exists in the Facebook, Twitter, and Embedded plugins in Vanilla Forums before 2.0.17.9.
• CVE-2011-3613高 7.5An issue exists in Vanilla Forums before 2.0.17.9 due to the way cookies are handled.
• CVE-2019-9889低 2.7In Vanilla before 2.6.4, a flaw exists within the getSingleIndex function of the AddonManager class. The issue results in a require call usi…