CVE-2010-3895

Mô tả

Tham khảo

• security.fatihkilic.de/advisory/fkilic-sa-2010-ibm-omnifind.txt · Exploit
• exploit-db.com/exploits/15475 · Exploit
• securityfocus.com/archive/1/514688/100/0/threaded
• securityfocus.com/bid/44740
• vupen.com/english/advisories/2010/2933 · Vendor Advisory

Lỗ hổng khác của omnifind

• CVE-2010-4236TRUNG BÌNH 6.9Untrusted search path vulnerability in estaskwrapper in IBM OmniFind Enterprise Edition before 9.1 allows local users to gain privileges via…
• CVE-2010-3899TRUNG BÌNH 5.0IBM OmniFind Enterprise Edition 8.x and 9.x performs web crawls with an unlimited recursion depth, which allows remote web servers to cause …
• CVE-2010-3898TRUNG BÌNH 5.0IBM OmniFind Enterprise Edition 8.x and 9.x does not properly restrict the cookie path of administrator (aka ESAdmin) cookies, which might a…
• CVE-2010-3897TRUNG BÌNH 5.0ESSearchApplication/palette.do in IBM OmniFind Enterprise Edition 8.x and 9.x includes the administrator password in the HTML source code, w…
• CVE-2010-3896CAO 7.5The ESSearchApplication directory tree in IBM OmniFind Enterprise Edition 8.x and 9.x does not require authentication, which allows remote a…