CVE-2016-5942

概要

参考情報

• ibm.com/support/docview.wss · Patch
• securityfocus.com/bid/95440 · Third Party Advisory

kenexa lms のその他の脆弱性

• CVE-2016-8935中 5.4IBM Kenexa LMS on Cloud 13.1, 13.2, 13.2.2, 13.2.3, 13.2.4 and 14.0.0 are vulnerable to cross-site scripting. This vulnerability allows user…
• CVE-2016-8933中 6.5IBM Kenexa LMS on Cloud could allow a remote attacker to traverse directories on the system. An attacker could send a specially-crafted URL …
• CVE-2016-8932高 8.8IBM Kenexa LMS on Cloud could allow a remote attacker to upload arbitrary files, which could allow the attacker to execute arbitrary code on…
• CVE-2016-8931高 8.8IBM Kenexa LMS on Cloud could allow a remote attacker to upload arbitrary files, which could allow the attacker to execute arbitrary code on…
• CVE-2016-8930高 7.6IBM Kenexa LMS on Cloud is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the…