CVE-2015-1052

概要

参考情報

• packetstormsecurity.com/files/129917/CMS-PHPKit-WCMS-1.6.6-Cross-Site-Scripting.html · Exploit
• seclists.org/fulldisclosure/2015/Jan/25 · Exploit
• sroesemann.blogspot.de/2014/12/sroeadv-2014-07.html · Exploit
• sroesemann.blogspot.de/2015/01/report-for-advisory-sroeadv-2014-07.html · Exploit
• securityfocus.com/bid/72001 · Exploit

phpkit のその他の脆弱性

• CVE-2016-10758高 8.8PHPKIT 1.6.6 allows arbitrary File Upload, as demonstrated by a .php file to pkinc/admin/mediaarchive.php and pkinc/func/default.php via the…
• CVE-2008-7193中 6.8PHPKIT 1.6.4 PL1 includes the session ID in the URL, which allows remote attackers to conduct cross-site request forgery (CSRF) attacks by r…
• CVE-2007-6134高 7.5SQL injection vulnerability in pkinc/public/article.php in PHPKIT 1.6.4pl1 allows remote attackers to execute arbitrary SQL commands via the…
• CVE-2006-7115高 7.5SQL injection vulnerability in PHPKit 1.6.1 RC2 allows remote attackers to inject arbitrary SQL commands via the catid parameter to include.…
• CVE-2007-0179高 7.5SQL injection vulnerability in comment.php in PHPKIT 1.6.1 R2 allows remote attackers to execute arbitrary SQL commands via the subid parame…