CVE-2016-2351

概要

参考情報

• devco.re/blog/2016/04/21/how-I-hacked-facebook-and-found-someones-backdoor-script-eng-ver · Exploit
• kb.cert.org/vuls/id/505560 · Third Party Advisory

file transfer appliance のその他の脆弱性

• CVE-2019-5623緊急 9.8Accellion File Transfer Appliance version FTA_8_0_540 suffers from an instance of CWE-77: Improper Neutralization of Special Elements used i…
• CVE-2019-5622緊急 9.8Accellion File Transfer Appliance version FTA_8_0_540 suffers from an instance of CWE-798: Use of Hard-coded Credentials.
• CVE-2015-2856高 7.5Directory traversal vulnerability in the template function in function.inc in Accellion File Transfer Appliance devices before FTA_9_11_210 …
• CVE-2015-2857緊急 9.8Accellion File Transfer Appliance before FTA_9_11_210 allows remote attackers to execute arbitrary code via shell metacharacters in the oaut…
• CVE-2017-8796緊急 9.8An issue was discovered on Accellion FTA devices before FTA_9_12_180. Because mysql_real_escape_string is misused, seos/courier/communicatio…