CVE-2015-2209

概要

参考情報

• seclists.org/fulldisclosure/2015/Feb/67
• tetraph.com/security/full-path-disclosure-vulnerability/dlguard-full-path-disclosure-information-leakage-security-vulnerabilities
• securityfocus.com/bid/72685

dlguard のその他の脆弱性

• CVE-2015-2066高 7.5SQL injection vulnerability in DLGuard 4.5 allows remote attackers to execute arbitrary SQL commands via the c parameter to index.php.
• CVE-2015-2064中 4.3Multiple cross-site scripting (XSS) vulnerabilities in DLGuard 5, 4.6, and 4.5 allow remote attackers to inject arbitrary web script or HTML…
• CVE-2011-5115中 4.3Cross-site scripting (XSS) vulnerability in DLGuard, possibly 4.6 and earlier, allows remote attackers to inject arbitrary web script or HTM…