CVE-2011-1584

Mô tả

Tham khảo

• dev.dotclear.org/2.0/changeset/2:3427 · Exploit
• dotclear.org/blog/post/2011/04/01/Dotclear-2.2.3 · Patch
• fr.dotclear.org/blog/post/2011/04/01/Dotclear-2.2.3 · Vendor Advisory
• openwall.com/lists/oss-security/2011/04/13/19
• openwall.com/lists/oss-security/2011/04/14/8
• openwall.com/lists/oss-security/2011/04/15/11
• openwall.com/lists/oss-security/2011/04/15/7
• secunia.com/advisories/44049 · Vendor Advisory
• arcabit.com/english/home/a-flaw-in-dotclear

Lỗ hổng khác của dotclear

• CVE-2023-53952CAO 8.8Dotclear 2.25.3 contains a remote code execution vulnerability that allows authenticated attackers to upload malicious PHP files with .phar …
• CVE-2024-58281CAO 8.8Dotclear 2.29 contains a remote code execution vulnerability that allows authenticated attackers to upload malicious PHP files through the m…
• CVE-2024-27626TRUNG BÌNH 6.1A Reflected Cross-Site Scripting (XSS) vulnerability has been identified in Dotclear version 2.29. The flaw exists within the Search functio…
• CVE-2018-16358TRUNG BÌNH 5.4A cross-site scripting (XSS) vulnerability in inc/core/class.dc.core.php in the media manager in Dotclear through 2.14.1 allows remote authe…
• CVE-2018-5690TRUNG BÌNH 5.4Cross-site scripting (XSS) vulnerability in admin/users.php in Dotclear 2.12.1 allows remote authenticated users to inject arbitrary web scr…