CVE-2011-4677

概要

参考情報

• dmcdonald.net
• groups.google.com/group/oneclickorgs-devspace/msg/26c40a4cc9e127d2

one click orgs のその他の脆弱性

• CVE-2011-4678中 5.0The password reset feature in One Click Orgs before 1.2.3 generates different error messages for failed reset attempts depending on whether …
• CVE-2011-4555中 4.0One Click Orgs before 1.2.3 does not require unique e-mail addresses for user accounts, which allows remote authenticated users to cause a d…
• CVE-2011-4554中 5.5One Click Orgs before 1.2.3 allows remote authenticated users to trigger crafted SMTP traffic via (1) " (double quote) and newline character…
• CVE-2011-4553中 5.8Multiple open redirect vulnerabilities in One Click Orgs before 1.2.3 allow (1) remote attackers to redirect users to arbitrary web sites an…
• CVE-2011-4552中 4.3Multiple cross-site scripting (XSS) vulnerabilities in One Click Orgs before 1.2.3 allow remote attackers to inject arbitrary web script or …