CVE-2015-1471

Description

References

• pastebin.com/ip2gGYuS · Exploit
• seclists.org/fulldisclosure/2015/Feb/18
• seclists.org/oss-sec/2015/q1/402
• sroesemann.blogspot.de/2015/01/sroeadv-2015-11.html · Exploit
• sroesemann.blogspot.de/2015/02/advisory-for-sroeadv-2015-11.html · Exploit
• delta/pragyan commit c93bc10
• delta/pragyan

pragyan cms의 다른 취약점

• CVE-2017-14601보통 4.9Pragyan CMS v3.0 is vulnerable to a Boolean-based SQL injection in cms/admin.lib.php via $_GET['forwhat'], resulting in Information Disclosu…
• CVE-2017-14600보통 4.9Pragyan CMS v3.0 is vulnerable to an Error-Based SQL injection in cms/admin.lib.php via $_GET['del_black'], resulting in Information Disclos…
• CVE-2015-4627심각 9.8SQL injection vulnerability in Pragyan CMS 3.0.
• CVE-2012-6500보통 5.0Directory traversal vulnerability in download.lib.php in Pragyan CMS 3.0 and earlier allows remote attackers to read arbitrary files via a .…
• CVE-2009-1480높음 7.5SQL injection vulnerability in index.php Pragyan CMS 2.6.4 allows remote attackers to execute arbitrary SQL commands via the fileget paramet…