CVE-2012-5169

概要

参考情報

• archives.neohapsis.com/archives/bugtraq/2012-10/0095.html · Exploit
• osvdb.org/86426
• secunia.com/advisories/51034 · Vendor Advisory
• update.atutor.ca/acontent/patch/1_2 · Patch
• securityfocus.com/bid/56100
• exchange.xforce.ibmcloud.com/vulnerabilities/79463
• htbridge.com/advisory/HTB23117 · Exploit

acontent のその他の脆弱性

• CVE-2020-10557高 8.8An issue was discovered in AContent through 1.4. It allows the user to run commands on the server with a low-privileged account. The upload …
• CVE-2012-5454中 6.5user/index_inline_editor_submit.php in ATutor AContent 1.2-1 does not properly restrict access, which allows remote authenticated users to m…
• CVE-2012-5453中 6.5SQL injection vulnerability in user/index_inline_editor_submit.php in ATutor AContent 1.2-1 allows remote authenticated users to execute arb…
• CVE-2012-5168高 7.5ATutor AContent before 1.2-1 allows remote attackers to modify arbitrary user passwords or category names via a direct request to (1) user/i…
• CVE-2012-5167高 7.5Multiple SQL injection vulnerabilities in ATutor AContent before 1.2-1 allow remote attackers to execute arbitrary SQL commands via the (1) …