CVE-2012-5894

概要

参考情報

• osvdb.org/80769
• packetstormsecurity.org/files/111358/Havalite-CMS-Shell-Upload-SQL-Injection-Disclosure.html · Exploit
• secunia.com/advisories/48646 · Vendor Advisory
• exchange.xforce.ibmcloud.com/vulnerabilities/74487

cms のその他の脆弱性

• CVE-2012-5919中 4.3Multiple cross-site scripting (XSS) vulnerabilities in Havalite 1.0.4 and earlier allow remote attackers to inject arbitrary web script or H…
• CVE-2012-5893中 6.8Unrestricted file upload vulnerability in hava_upload.php in Havalite CMS 1.1.0 and earlier allows remote attackers to execute arbitrary cod…
• CVE-2012-5892中 5.0Havalite CMS 1.1.0 and earlier stores sensitive information under the web root with insufficient access control, which allows remote attacke…