CVE-2011-3764

概要

参考情報

• code.google.com/p/inspathx/source/browse/trunk/paths_vuln/%21_README
• code.google.com/p/inspathx/source/browse/trunk/paths_vuln/opendocman-1.2.6-svn-2011-01-21 · Exploit
• openwall.com/lists/oss-security/2011/06/27/6
• exchange.xforce.ibmcloud.com/vulnerabilities/70608

opendocman のその他の脆弱性

• CVE-2019-25684高 8.2OpenDocMan 1.3.4 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting S…
• CVE-2021-45834緊急 9.8An attacker can upload or transfer files of dangerous types to the OpenDocMan 1.4.4 portal via add.php using MIME-bypass, which may be autom…
• CVE-2014-1946高 8.8OpenDocMan 1.2.7 and earlier does not properly validate allowed actions, which allows remote authenticated users to bypass an intended acces…
• CVE-2015-5625中 4.3Cross-site scripting (XSS) vulnerability in OpenDocMan before 1.3.4 allows remote attackers to inject arbitrary web script or HTML via the r…
• CVE-2014-4853中 4.3Cross-site scripting (XSS) vulnerability in odm-init.php in OpenDocMan before 1.2.7.3 allows remote authenticated users to inject arbitrary …