CVE-2011-3700

概要

参考情報

• code.google.com/p/inspathx/source/browse/trunk/paths_vuln/%21_README · Exploit
• code.google.com/p/inspathx/source/browse/trunk/paths_vuln/aef-1.0.8
• openwall.com/lists/oss-security/2011/06/27/6

advanced electron forum のその他の脆弱性

• CVE-2018-13000中 4.8An XSS issue was discovered in Advanced Electron Forum (AEF) v1.0.9. A persistent XSS vulnerability is located in the `FTP Link` element of …
• CVE-2009-2546中 4.3Directory traversal vulnerability in Advanced Electron Forum (AEF) 1.x allows remote attackers to determine the existence of arbitrary files…
• CVE-2009-2545中 6.8SQL injection vulnerability in Advanced Electron Forum (AEF) 1.x, when magic_quotes_gpc is disabled, allows remote attackers to execute arbi…
• CVE-2008-5090緊急 10.0Electron Inc. Advanced Electron Forum before 1.0.7 allows remote attackers to execute arbitrary PHP code via PHP code embedded in bbcode in …
• CVE-2008-1983中 4.3Cross-site scripting (XSS) vulnerability in Advanced Electron Forum (AEF) 1.0.6 allows remote attackers to inject arbitrary web script or HT…