CVE-2013-5312

概要

参考情報

• osvdb.org/96226
• osvdb.org/show/osvdb/96225
• packetstormsecurity.com/files/122746/PHP-VID-XSS-SQL-Injection-CRLF-Injection.html · Exploit
• exploit-db.com/exploits/27519 · Exploit
• securityfocus.com/bid/61734 · Exploit

phpvid のその他の脆弱性

• CVE-2015-2563高 7.5SQL injection vulnerability in groups.php in Vastal I-Tech phpVID 0.9.9 and 1.2.3 allows remote attackers to execute arbitrary SQL commands …
• CVE-2013-5311高 7.5Multiple SQL injection vulnerabilities in Vastal I-Tech phpVID 1.2.3 allow remote attackers to execute arbitrary SQL commands via the "n" pa…
• CVE-2008-4157高 7.5SQL injection vulnerability in groups.php in Vastal I-Tech phpVID 1.1 allows remote attackers to execute arbitrary SQL commands via the cat …
• CVE-2008-2335中 4.3Cross-site scripting (XSS) vulnerability in search_results.php in Vastal I-Tech phpVID 1.1 and 1.2 allows remote attackers to inject arbitra…