CVE-2011-3725

概要

参考情報

• code.google.com/p/inspathx/source/browse/trunk/paths_vuln/%21_README
• code.google.com/p/inspathx/source/browse/trunk/paths_vuln/deluxebb-1.3 · Exploit
• openwall.com/lists/oss-security/2011/06/27/6

deluxebb のその他の脆弱性

• CVE-2010-4151中 6.8SQL injection vulnerability in misc.php in DeluxeBB 1.3, and possibly earlier, when magic_quotes_gpc is disabled, allows remote attackers to…
• CVE-2010-1859中 6.8SQL injection vulnerability in newpost.php in DeluxeBB 1.3 and earlier, when magic_quotes_gpc is disabled, allows remote attackers to execut…
• CVE-2009-4468中 4.3Cross-site scripting (XSS) vulnerability in misc.php in DeluxeBB 1.3 allows remote attackers to inject arbitrary web script or HTML via the …
• CVE-2009-4467中 4.0misc.php in DeluxeBB 1.3 allows remote attackers to register accounts without a valid email address via a valemail action with the valmem se…
• CVE-2009-4466中 5.0DeluxeBB 1.3 allows remote attackers to obtain sensitive information via a crafted page parameter to misc.php, which reveals the installatio…