CVE-2012-4058

概要

参考情報

• osvdb.org/81532
• packetstormsecurity.org/files/112090/SocketMail-Pro-2.2.9-Cross-Site-Request-Forgery-Cross-Site-Scripting.html · Exploit
• exchange.xforce.ibmcloud.com/vulnerabilities/75113

socketmail のその他の脆弱性

• CVE-2012-4059中 6.8Cross-site request forgery (CSRF) vulnerability in home/secretqtn.php in SocketMail Pro 2.2.9 allows remote attackers to hijack the authenti…
• CVE-2007-5649中 4.3Cross-site scripting (XSS) vulnerability in lostpwd.php in Creative Digital Resources SocketMail 2.2.1 allows remote attackers to inject arb…
• CVE-2007-5627中 6.8PHP remote file inclusion vulnerability in content/fnc-readmail3.php in SocketMail 2.2.8 allows remote attackers to execute arbitrary PHP co…
• CVE-2006-2681中 6.8PHP remote file inclusion vulnerability in SocketMail Lite and Pro 2.2.6 and earlier, when register_globals and magic_quotes are enabled, al…