CVE-2014-9235

概要

参考情報

• packetstormsecurity.com/files/129141/Zoph-0.9.1-Cross-Site-Scripting-SQL-Injection.html · Exploit
• seclists.org/fulldisclosure/2014/Nov/45 · Exploit

zoph のその他の脆弱性

• CVE-2014-9236中 4.3Cross-site scripting (XSS) vulnerability in php/edit_photos.php in Zoph (aka Zoph Organizes Photos) 0.9.1 and earlier allows remote attacker…
• CVE-2009-2343中 4.3Cross-site scripting (XSS) vulnerability in people.php in Zoph before 0.7.0.6 allows remote attackers to inject arbitrary web script or HTML…
• CVE-2008-6838中 4.3Cross-site scripting (XSS) vulnerability in search.php in Zoph 0.7.2.1 allows remote attackers to inject arbitrary web script or HTML via th…
• CVE-2008-6837高 7.5SQL injection vulnerability in Zoph 0.7.2.1 allows remote attackers to execute arbitrary SQL commands via unspecified vectors, a different i…
• CVE-2008-3258高 7.5Multiple SQL injection vulnerabilities in Zoph before 0.7.0.5 allow remote attackers to execute arbitrary SQL commands via unspecified vecto…