CVE-2014-1637

概要

参考情報

• osvdb.org/101888
• packetstormsecurity.com/files/124708/Command-School-Student-Management-System-1.06.01-SQL-Injection-CSRF-XSS.html
• securityfocus.com/bid/64707

command school student management system のその他の脆弱性

• CVE-2014-1915中 6.8Multiple cross-site request forgery (CSRF) vulnerabilities in Command School Student Management System 1.06.01 allow remote attackers to hij…
• CVE-2014-1914中 4.3Multiple cross-site scripting (XSS) vulnerabilities in Command School Student Management System 1.06.01 allow remote attackers to inject arb…
• CVE-2014-1636高 7.5Multiple SQL injection vulnerabilities in Command School Student Management System 1.06.01 allow remote attackers to execute arbitrary SQL c…