CVE-2012-2316

概要

参考情報

• archives.neohapsis.com/archives/bugtraq/2012-01/0008.html · Exploit
• openkm.svn.sourceforge.net/viewvc/openkm
• secunia.com/advisories/47420 · Vendor Advisory
• wiki.openkm.com/index.php/Changelog
• openwall.com/lists/oss-security/2012/03/23/6
• openwall.com/lists/oss-security/2012/03/23/8
• openwall.com/lists/oss-security/2012/04/27/6
• openwall.com/lists/oss-security/2012/05/04/13
• openwall.com/lists/oss-security/2012/05/04/2
• osvdb.org/78106

openkm のその他の脆弱性

• CVE-2025-57244中 5.4OpenKM Community Edition 6.3.12 is vulnerable to stored cross-site scripting (XSS) in the user account creation interface. The Name field ac…
• CVE-2024-35475中 6.4A Cross-Site Request Forgery (CSRF) vulnerability was discovered in OpenKM Community Edition on or before version 6.3.12. The vulnerability …
• CVE-2023-50072中 5.4A Stored Cross-Site Scripting (XSS) vulnerability exists in OpenKM version 7.1.40 (dbb6e88) With Professional Extension that allows an authe…
• CVE-2021-33950高 7.5An issue discovered in OpenKM v6.3.10 allows attackers to obtain sensitive information via the XMLTextExtractor function.
• CVE-2022-47414中 5.4 If an attacker has access to the console for OpenKM (and is authenticated), a stored XSS vulnerability is reachable in the document "note" …