CVE-2011-3765

概要

参考情報

• code.google.com/p/inspathx/source/browse/trunk/paths_vuln/%21_README
• code.google.com/p/inspathx/source/browse/trunk/paths_vuln/open-realty-2.5.8
• openwall.com/lists/oss-security/2011/06/27/6
• exchange.xforce.ibmcloud.com/vulnerabilities/70607

open-realty のその他の脆弱性

• CVE-2012-1112中 6.8Directory traversal vulnerability in Open-Realty CMS 2.5.8 and earlier allows remote attackers to include and execute arbitrary local files …
• CVE-2007-0490中 5.0index.php in Open-Realty 2.3.4 allows remote attackers to obtain sensitive information (the full path) via an invalid listingID parameter in…
• CVE-2006-3148高 7.5SQL injection vulnerability, possibly in search.inc.php, in Open-Realty 2.3.1 allows remote attackers to execute arbitrary SQL commands via …