CVE-2015-8831

概要

参考情報

• dotclear.org/blog/post/2015/10/25/Dotclear-2.8.2 · Release Notes
• packetstormsecurity.com/files/134353/dotclear-2.8.1-Cross-Site-Scripting.html · Exploit
• seclists.org/fulldisclosure/2015/Nov/59 · Mailing List
• openwall.com/lists/oss-security/2016/03/05/4 · Mailing List
• openwall.com/lists/oss-security/2016/03/07/5 · Mailing List
• securityfocus.com/bid/96377
• blog.curesec.com/article/blog/dotclear-281-XSS-94.html · Exploit
• hg.dotclear.org/dotclear/rev/65e65154dadf · Issue Tracking

dotclear のその他の脆弱性

• CVE-2023-53952高 8.8Dotclear 2.25.3 contains a remote code execution vulnerability that allows authenticated attackers to upload malicious PHP files with .phar …
• CVE-2024-58281高 8.8Dotclear 2.29 contains a remote code execution vulnerability that allows authenticated attackers to upload malicious PHP files through the m…
• CVE-2024-27626中 6.1A Reflected Cross-Site Scripting (XSS) vulnerability has been identified in Dotclear version 2.29. The flaw exists within the Search functio…
• CVE-2018-16358中 5.4A cross-site scripting (XSS) vulnerability in inc/core/class.dc.core.php in the media manager in Dotclear through 2.14.1 allows remote authe…
• CVE-2018-5690中 5.4Cross-site scripting (XSS) vulnerability in admin/users.php in Dotclear 2.12.1 allows remote authenticated users to inject arbitrary web scr…