CVE-2013-2025

概要

参考情報

• securityfocus.com/bid/59410
• rjmackay/Ushahidi_Web commit 593719f · Exploit
• ushahidi/Ushahidi_Web
• ushahidi/Ushahidi_Web#1056
• wiki.ushahidi.com/display/WIKI/1+May+2013+-+CVE-2013-2025 · Patch

ushahidi platform のその他の脆弱性

• CVE-2012-3476低 3.5Multiple cross-site scripting (XSS) vulnerabilities in (1) application/views/admin/layout.php and (2) themes/default/views/header.php in the…
• CVE-2012-3475高 7.5The installer in the Ushahidi Platform before 2.5 omits certain calls to the exit function, which allows remote attackers to obtain administ…
• CVE-2012-3474中 5.0The comments API in application/libraries/api/MY_Comments_Api_Object.php in the Ushahidi Platform before 2.5 allows remote attackers to obta…
• CVE-2012-3473中 6.4The (1) reports API and (2) administration feature in the comments API in the Ushahidi Platform before 2.5 do not require authentication, wh…
• CVE-2012-3472中 6.4The email API in application/libraries/api/MY_Email_Api_Object.php in the Ushahidi Platform before 2.5 does not require authentication, whic…