CVE-2012-5167

概要

参考情報

• archives.neohapsis.com/archives/bugtraq/2012-10/0095.html · Exploit
• osvdb.org/86424
• osvdb.org/86425
• secunia.com/advisories/51014 · Vendor Advisory
• secunia.com/advisories/51034 · Vendor Advisory
• update.atutor.ca/acontent/patch/1_2 · Patch
• securityfocus.com/bid/56100 · Exploit
• exchange.xforce.ibmcloud.com/vulnerabilities/79459
• exchange.xforce.ibmcloud.com/vulnerabilities/79460
• htbridge.com/advisory/HTB23117 · Exploit

acontent のその他の脆弱性

• CVE-2020-10557高 8.8An issue was discovered in AContent through 1.4. It allows the user to run commands on the server with a low-privileged account. The upload …
• CVE-2012-5454中 6.5user/index_inline_editor_submit.php in ATutor AContent 1.2-1 does not properly restrict access, which allows remote authenticated users to m…
• CVE-2012-5453中 6.5SQL injection vulnerability in user/index_inline_editor_submit.php in ATutor AContent 1.2-1 allows remote authenticated users to execute arb…
• CVE-2012-5169中 4.3Multiple cross-site scripting (XSS) vulnerabilities in file_manager/preview_top.php in ATutor AContent before 1.2-2 allow remote attackers t…
• CVE-2012-5168高 7.5ATutor AContent before 1.2-1 allows remote attackers to modify arbitrary user passwords or category names via a direct request to (1) user/i…