CVE-2015-2209

Description

References

• seclists.org/fulldisclosure/2015/Feb/67
• tetraph.com/security/full-path-disclosure-vulnerability/dlguard-full-path-disclosure-information-leakage-security-vulnerabilities
• securityfocus.com/bid/72685

dlguard의 다른 취약점

• CVE-2015-2066높음 7.5SQL injection vulnerability in DLGuard 4.5 allows remote attackers to execute arbitrary SQL commands via the c parameter to index.php.
• CVE-2015-2064보통 4.3Multiple cross-site scripting (XSS) vulnerabilities in DLGuard 5, 4.6, and 4.5 allow remote attackers to inject arbitrary web script or HTML…
• CVE-2011-5115보통 4.3Cross-site scripting (XSS) vulnerability in DLGuard, possibly 4.6 and earlier, allows remote attackers to inject arbitrary web script or HTM…