CVE-2010-1299

Mô tả

Tham khảo

• osvdb.org/63415 · Broken Link
• packetstormsecurity.org/1004-exploits/dynpgcms-rfi.txt · Exploit
• secunia.com/advisories/39185 · Vendor Advisory
• dynpg.org/cms-freeware.php
• exploit-db.com/exploits/11994 · Exploit
• securityfocus.com/archive/1/510477/100/0/threaded · Third Party Advisory
• securityfocus.com/bid/39168 · Exploit
• exchange.xforce.ibmcloud.com/vulnerabilities/57490 · VDB Entry
• exchange.xforce.ibmcloud.com/vulnerabilities/57491 · VDB Entry

Lỗ hổng khác của dynpg

• CVE-2020-27406TRUNG BÌNH 5.4Cross Site Scripting (XSS) vulnerability in DynPG 4.9.1, allows authenticated attackers to execute arbitrary code via the groupname.
• CVE-2021-27531TRUNG BÌNH 4.8A cross-site scripting (XSS) vulnerability in DynPG version 4.9.2 allows remote attackers to inject JavaScript via the "query" parameter.
• CVE-2021-27530TRUNG BÌNH 4.8A cross-site scripting (XSS) vulnerability in DynPG version 4.9.2 allow remote attacker to inject javascript via URI in /index.php.
• CVE-2021-27529TRUNG BÌNH 4.8A cross-site scripting (XSS) vulnerability in DynPG version 4.9.2 allows remote attackers to inject JavaScript via the "limit" parameter.
• CVE-2021-27528TRUNG BÌNH 4.8A cross-site scripting (XSS) vulnerability in DynPG version 4.9.2 allows remote attackers to inject JavaScript via the "refID" parameter.