CVE-2012-5893

概要

参考情報

• osvdb.org/80768
• packetstormsecurity.org/files/111358/Havalite-CMS-Shell-Upload-SQL-Injection-Disclosure.html · Exploit
• secunia.com/advisories/48646 · Vendor Advisory
• exchange.xforce.ibmcloud.com/vulnerabilities/74486

cms のその他の脆弱性

• CVE-2012-5919中 4.3Multiple cross-site scripting (XSS) vulnerabilities in Havalite 1.0.4 and earlier allow remote attackers to inject arbitrary web script or H…
• CVE-2012-5894高 7.5SQL injection vulnerability in hava_post.php in Havalite CMS 1.1.0 and earlier allows remote attackers to execute arbitrary SQL commands via…
• CVE-2012-5892中 5.0Havalite CMS 1.1.0 and earlier stores sensitive information under the web root with insufficient access control, which allows remote attacke…