CVE-2011-3797

概要

参考情報

• code.google.com/p/inspathx/source/browse/trunk/paths_vuln/%21_README
• code.google.com/p/inspathx/source/browse/trunk/paths_vuln/projectpier-0.8.0.3
• openwall.com/lists/oss-security/2011/06/27/6

projectpier のその他の脆弱性

• CVE-2013-3637中 5.4ProjectPier 0.8.8 does not use the Secure flag for cookies
• CVE-2013-3636中 5.4ProjectPier 0.8.8 has a Remote Information Disclosure Weakness because of the lack of the HttpOnly cookie flag
• CVE-2013-3635中 5.4ProjectPier 0.8.8 has stored XSS
• CVE-2018-10760高 8.8Unrestricted file upload vulnerability in the Files plugin in ProjectPier 0.88 and earlier allows remote authenticated users to execute arbi…
• CVE-2018-10759緊急 9.8PHP remote file inclusion vulnerability in public/patch/patch.php in Project Pier 0.8.8 and earlier allows remote attackers to execute arbit…