CVE-2012-4868

概要

参考情報

• exploitsdownload.com/exploit/na/kunena-20-sql-injection · Exploit
• securityfocus.com/bid/52636 · Exploit

kunena のその他の脆弱性

• CVE-2016-11020緊急 9.8Kunena before 5.0.4 does not restrict avatar file extensions to gif, jpeg, jpg, and png. This can lead to XSS and remote code execution.
• CVE-2019-15120中 5.4The Kunena extension before 5.1.14 for Joomla! allows XSS via BBCode.
• CVE-2017-5673中 6.1In the Kunena extension 5.0.2 through 5.0.4 for Joomla!, the forum message subject (aka topic subject) accepts JavaScript, leading to XSS. S…
• CVE-2014-9103中 4.3Multiple cross-site scripting (XSS) vulnerabilities in the Kunena component before 3.0.6 for Joomla! allow remote attackers to inject arbitr…
• CVE-2014-9102中 6.5Multiple SQL injection vulnerabilities in the Kunena component before 3.0.6 for Joomla! allow remote authenticated users to execute arbitrar…