CVE-2012-4890

概要

参考情報

• packetstormsecurity.org/files/111473/Flatnux-CMS-2011-08.09.2-CSRF-XSS-Directory-Traversal.html · Exploit
• secunia.com/advisories/48656 · Vendor Advisory
• secunia.com/advisories/48676 · Vendor Advisory
• osvdb.org/80877
• securityfocus.com/bid/52846
• vulnerability-lab.com/get_content.php
• exchange.xforce.ibmcloud.com/vulnerabilities/74566

flatnux のその他の脆弱性

• CVE-2012-4892中 4.3Multiple cross-site scripting (XSS) vulnerabilities in FlatnuX CMS 2012-03.08 and earlier allow remote attackers to inject arbitrary web scr…
• CVE-2012-4878中 5.0Absolute path traversal vulnerability in controlcenter.php in FlatnuX CMS 2011 08.09.2 allows remote administrators to read arbitrary files …
• CVE-2012-4877中 6.8Cross-site request forgery (CSRF) vulnerability in controlcenter.php in FlatnuX CMS 2011 08.09.2 and earlier allows remote attackers to hija…
• CVE-2009-0572中 5.1PHP remote file inclusion vulnerability in include/flatnux.php in FlatnuX CMS (aka Flatnuke3) 2009-01-27 and 2009-02-04, when register_globa…
• CVE-2008-5761中 4.3Multiple cross-site scripting (XSS) vulnerabilities in FlatnuX CMS (aka Flatnuke3) 2008-12-11 allow remote attackers to inject arbitrary web…