CVE-2011-3711

概要

参考情報

• code.google.com/p/inspathx/source/browse/trunk/paths_vuln/%21_README
• code.google.com/p/inspathx/source/browse/trunk/paths_vuln/bigace_2.7.5 · Exploit
• openwall.com/lists/oss-security/2011/06/27/6

bigace のその他の脆弱性

• CVE-2012-5173中 6.8Session fixation vulnerability in BIGACE before 2.7.8 allows remote attackers to hijack web sessions via unspecified vectors.
• CVE-2009-3120中 4.3Cross-site scripting (XSS) vulnerability in public/index.php in BIGACE Web CMS 2.6 allows remote attackers to inject arbitrary web script or…
• CVE-2008-2520高 7.5Multiple PHP remote file inclusion vulnerabilities in BigACE 2.4, when register_globals is enabled, allow remote attackers to execute arbitr…
• CVE-2006-4423高 7.5Multiple PHP remote file inclusion vulnerabilities in Bigace 1.8.2 allow remote attackers to execute arbitrary PHP code via a URL in the (1)…