CVE-2014-4194

概要

参考情報

• packetstormsecurity.com/files/127164/ZeroCMS-1.0-SQL-Injection.html · Exploit
• securityfocus.com/bid/68134

zerocms のその他の脆弱性

• CVE-2015-1442高 7.5SQL injection vulnerability in views/zero_transact_user.php in the administrative backend in ZeroCMS 1.3.3, 1.3.2, and earlier allows remote…
• CVE-2014-4710中 4.3Cross-site scripting (XSS) vulnerability in zero_user_account.php in ZeroCMS 1.0 allows remote attackers to inject arbitrary web script or H…
• CVE-2014-4195中 4.3Cross-site scripting (XSS) vulnerability in zero_view_article.php in ZeroCMS 1.0 allows remote attackers to inject arbitrary web script or H…
• CVE-2014-4034高 7.5SQL injection vulnerability in zero_view_article.php in ZeroCMS 1.0 allows remote attackers to execute arbitrary SQL commands via the articl…