CVE-2015-5382

概要

参考情報

• openwall.com/lists/oss-security/2015/07/07/2 · Mailing List
• openwall.com/lists/oss-security/2015/07/07/3 · Mailing List
• roundcube/roundcubemail commit 6ccd4c5 · Issue Tracking
• roundcube/roundcubemail commit e84fafc · Issue Tracking
• roundcube/roundcubemail · Issue Tracking
• roundcube.net/news/2015/06/05/updates-1.1.2-and-1.0.6-released · Patch

roundcube webmail のその他の脆弱性

• CVE-2015-5383高 7.5Roundcube Webmail 1.1.x before 1.1.2 allows remote attackers to obtain sensitive information by reading files in the (1) config, (2) temp, o…
• CVE-2015-5381中 6.1Cross-site scripting (XSS) vulnerability in program/include/rcmail.php in Roundcube Webmail 1.1.x before 1.1.2 allows remote attackers to in…
• CVE-2016-4068中 6.1Cross-site scripting (XSS) vulnerability in Roundcube Webmail before 1.0.9 and 1.1.x before 1.1.5 allows remote attackers to inject arbitrar…
• CVE-2015-8864中 6.1Cross-site scripting (XSS) vulnerability in Roundcube Webmail before 1.0.9 and 1.1.x before 1.1.5 allows remote attackers to inject arbitrar…
• CVE-2015-8794中 6.5Absolute path traversal vulnerability in program/steps/addressbook/photo.inc in Roundcube before 1.0.6 and 1.1.x before 1.1.2 allows remote …