CVE-2012-5168

概要

参考情報

• archives.neohapsis.com/archives/bugtraq/2012-10/0095.html · Exploit
• osvdb.org/86428
• secunia.com/advisories/51014 · Vendor Advisory
• secunia.com/advisories/51034 · Vendor Advisory
• update.atutor.ca/acontent/patch/1_2 · Patch
• securityfocus.com/bid/56100 · Exploit
• exchange.xforce.ibmcloud.com/vulnerabilities/79461
• exchange.xforce.ibmcloud.com/vulnerabilities/79462
• htbridge.com/advisory/HTB23117 · Exploit

acontent のその他の脆弱性

• CVE-2020-10557高 8.8An issue was discovered in AContent through 1.4. It allows the user to run commands on the server with a low-privileged account. The upload …
• CVE-2012-5454中 6.5user/index_inline_editor_submit.php in ATutor AContent 1.2-1 does not properly restrict access, which allows remote authenticated users to m…
• CVE-2012-5453中 6.5SQL injection vulnerability in user/index_inline_editor_submit.php in ATutor AContent 1.2-1 allows remote authenticated users to execute arb…
• CVE-2012-5169中 4.3Multiple cross-site scripting (XSS) vulnerabilities in file_manager/preview_top.php in ATutor AContent before 1.2-2 allow remote attackers t…
• CVE-2012-5167高 7.5Multiple SQL injection vulnerabilities in ATutor AContent before 1.2-1 allow remote attackers to execute arbitrary SQL commands via the (1) …