CVE-2012-3476

概要

参考情報

• openwall.com/lists/oss-security/2012/08/09/5
• ushahidi/Ushahidi_Web commit 00eae4f · Exploit

ushahidi platform のその他の脆弱性

• CVE-2013-2025中 4.3Cross-site scripting (XSS) vulnerability in Ushahidi Platform 2.5.x through 2.6.1 allows remote attackers to inject arbitrary web script or …
• CVE-2012-3475高 7.5The installer in the Ushahidi Platform before 2.5 omits certain calls to the exit function, which allows remote attackers to obtain administ…
• CVE-2012-3474中 5.0The comments API in application/libraries/api/MY_Comments_Api_Object.php in the Ushahidi Platform before 2.5 allows remote attackers to obta…
• CVE-2012-3473中 6.4The (1) reports API and (2) administration feature in the comments API in the Ushahidi Platform before 2.5 do not require authentication, wh…
• CVE-2012-3472中 6.4The email API in application/libraries/api/MY_Email_Api_Object.php in the Ushahidi Platform before 2.5 does not require authentication, whic…