CVE-2014-10038

概要

参考情報

• osvdb.org/show/osvdb/102180
• packetstormsecurity.com/files/124801 · Exploit
• exploit-db.com/exploits/30872 · Exploit
• exchange.xforce.ibmcloud.com/vulnerabilities/90528

domphp のその他の脆弱性

• CVE-2014-10037高 7.5Directory traversal vulnerability in DomPHP 0.83 and earlier allows remote attackers to have unspecified impact via a .. (dot dot) in the ur…
• CVE-2008-6064高 7.5Multiple SQL injection vulnerabilities in DomPHP 0.81 allow remote attackers to execute arbitrary SQL commands via the cat parameter to agen…
• CVE-2008-0745高 7.5Directory traversal vulnerability in aides/index.php in DomPHP 0.82 allows remote attackers to include and execute arbitrary local files via…
• CVE-2008-0283中 6.8PHP remote file inclusion vulnerability in /aides/index.php in DomPHP 0.81 and earlier allows remote attackers to execute arbitrary PHP code…
• CVE-2008-0282高 7.5SQL injection vulnerability in welcome/inscription.php in DomPHP 0.81 and earlier allows remote attackers to execute arbitrary SQL commands …