CVE-2004-2162

Mô tả

Tham khảo

• cvs.sourceforge.net/viewcvs.py/tutos/tutos/php/app_new.php
• secunia.com/advisories/12606 · Patch
• secunia.com/advisories/18954
• debian.org/security/2006/dsa-980
• securityfocus.com/archive/1/375757 · Exploit
• securityfocus.com/bid/11221
• exchange.xforce.ibmcloud.com/vulnerabilities/17445

Lỗ hổng khác của tutos

• CVE-2008-0149TRUNG BÌNH 5.0TUTOS 1.3 allows remote attackers to read system information via a direct request to php/admin/phpinfo.php, which calls the phpinfo function…
• CVE-2008-0148NGHIÊM TRỌNG 10.0TUTOS 1.3 does not restrict access to php/admin/cmd.php, which allows remote attackers to execute arbitrary shell commands via the cmd param…
• CVE-2004-2161CAO 7.5SQL injection vulnerability in file_overview.php in TUTOS 1.1 allows remote attackers to execute arbitrary SQL commands via the link_id para…