CVE-2015-2066

Description

References

• seclists.org/fulldisclosure/2015/Feb/69
• securityrelated.blogspot.com/2015/02/dlguard-sql-injection-security.html
• tetraph.com/security/sql-injection-vulnerability/dlguard-sql-injection-security-vulnerabilities
• securityfocus.com/bid/72683

dlguard의 다른 취약점

• CVE-2015-2209보통 5.0DLGuard 4.5 allows remote attackers to obtain the installation path via the c parameter to index.php.
• CVE-2015-2064보통 4.3Multiple cross-site scripting (XSS) vulnerabilities in DLGuard 5, 4.6, and 4.5 allow remote attackers to inject arbitrary web script or HTML…
• CVE-2011-5115보통 4.3Cross-site scripting (XSS) vulnerability in DLGuard, possibly 4.6 and earlier, allows remote attackers to inject arbitrary web script or HTM…