CVE-2016-10758

概要

参考情報

• blog.ripstech.com/2016/phpkit-code-exection-for-privileged-users · Third Party Advisory
• demo.ripstech.com/projects/phpkit_1.6.6 · Exploit

phpkit のその他の脆弱性

• CVE-2015-1052中 4.3Cross-site scripting (XSS) vulnerability in the poll archive in PHPKIT 1.6.6 (Build 160014) allows remote attackers to inject arbitrary web …
• CVE-2008-7193中 6.8PHPKIT 1.6.4 PL1 includes the session ID in the URL, which allows remote attackers to conduct cross-site request forgery (CSRF) attacks by r…
• CVE-2007-6134高 7.5SQL injection vulnerability in pkinc/public/article.php in PHPKIT 1.6.4pl1 allows remote attackers to execute arbitrary SQL commands via the…
• CVE-2006-7115高 7.5SQL injection vulnerability in PHPKit 1.6.1 RC2 allows remote attackers to inject arbitrary SQL commands via the catid parameter to include.…
• CVE-2007-0179高 7.5SQL injection vulnerability in comment.php in PHPKIT 1.6.1 R2 allows remote attackers to execute arbitrary SQL commands via the subid parame…