CVE-2014-5100

概要

参考情報

• omeka.org/blog/2014/07/16/omeka-2-2-1-security-update-released · Patch
• omeka.org/codex/Release_Notes_for_2.2.1 · Vendor Advisory
• packetstormsecurity.com/files/127523/Omeka-2.2-Cross-Site-Request-Forgery-Cross-Site-Scripting.html · Exploit
• exploit-db.com/exploits/34100 · Exploit
• securityfocus.com/bid/68707 · Exploit
• zeroscience.mk/codes/omeka_csrfxss.txt · Exploit
• zeroscience.mk/en/vulnerabilities/ZSL-2014-5193.php · Exploit
• exchange.xforce.ibmcloud.com/vulnerabilities/94689
• exchange.xforce.ibmcloud.com/vulnerabilities/94690

omeka のその他の脆弱性

• CVE-2023-3982中 4.8Cross-site Scripting (XSS) - Stored in GitHub repository omeka/omeka-s prior to 4.0.2.
• CVE-2023-3981中 4.9Server-Side Request Forgery (SSRF) in GitHub repository omeka/omeka-s prior to 4.0.2.
• CVE-2023-3980中 4.8Cross-site Scripting (XSS) - Stored in GitHub repository omeka/omeka-s prior to 4.0.2.
• CVE-2021-26799中 6.1Cross Site Scripting (XSS) vulnerability in admin/files/edit in Omeka Classic <=2.7 allows remote attackers to inject arbitrary web script o…
• CVE-2018-13423中 6.1admin/themes/default/items/tag-form.php in Omeka before 2.6.1 allows XSS by adding or editing a tag.