CVE-2006-2857

Mô tả

Tham khảo

• secunia.com/advisories/20460 · Patch
• securityreason.com/securityalert/1046
• lifetype.net/blog.php/lifetype_development_journal/2006/06/04/important_security_upgrade_lifetype_1.0.5_released · Patch
• securityfocus.com/archive/1/435874/100/0/threaded
• securityfocus.com/bid/18264 · Exploit
• vupen.com/english/advisories/2006/2120
• exchange.xforce.ibmcloud.com/vulnerabilities/26916

Lỗ hổng khác của lifetype

• CVE-2011-3751TRUNG BÌNH 5.0LifeType 1.2.10 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation …
• CVE-2008-2196TRUNG BÌNH 4.3Cross-site scripting (XSS) vulnerability in admin.php in LifeType 1.2.8 allows remote attackers to inject arbitrary web script or HTML via t…
• CVE-2008-2178TRUNG BÌNH 4.3Cross-site scripting (XSS) vulnerability in admin.php in LifeType 1.2.7 allows remote attackers to inject arbitrary web script or HTML via t…
• CVE-2007-0979TRUNG BÌNH 5.0Unspecified vulnerability in LifeType before 1.1.6, and 1.2 before 1.2-beta2, allows remote attackers to obtain sensitive information (file …
• CVE-2006-6112TRUNG BÌNH 5.0LifeType 1.0.x and 1.1.x have insufficient access control for all of the PHP scripts under (1) class/ and (2) plugins/, which allows remote …