CVE-2015-2064

概要

参考情報

• seclists.org/fulldisclosure/2015/Feb/66
• securityrelated.blogspot.com/2015/02/dlguard-multiple-xss-cross-site.html
• tetraph.com/security/xss-vulnerability/dlguard-multiple-xss-cross-site-scripting-security-vulnerabilities
• securityfocus.com/bid/72684

dlguard のその他の脆弱性

• CVE-2015-2209中 5.0DLGuard 4.5 allows remote attackers to obtain the installation path via the c parameter to index.php.
• CVE-2015-2066高 7.5SQL injection vulnerability in DLGuard 4.5 allows remote attackers to execute arbitrary SQL commands via the c parameter to index.php.
• CVE-2011-5115中 4.3Cross-site scripting (XSS) vulnerability in DLGuard, possibly 4.6 and earlier, allows remote attackers to inject arbitrary web script or HTM…