CVE-2014-5521

概要

参考情報

• packetstormsecurity.com/files/128030/XRMS-Blind-SQL-Injection-Command-Execution.html · Exploit
• seclists.org/fulldisclosure/2014/Aug/78
• exploit-db.com/exploits/34452 · Exploit
• openwall.com/lists/oss-security/2014/08/27/4 · Exploit
• openwall.com/lists/oss-security/2014/08/29/1

xrms crm のその他の脆弱性

• CVE-2014-5520高 7.5SQL injection vulnerability in XRMS CRM, possibly 1.99.2, allows remote attackers to execute arbitrary SQL commands via the user_id paramete…