CVE-2011-4959

Mô tả

Tham khảo

• doc.silverstripe.org/framework/en/trunk/changelogs/2.3.12 · Vendor Advisory
• doc.silverstripe.org/framework/en/trunk/changelogs/2.4.6 · Vendor Advisory
• openwall.com/lists/oss-security/2012/04/30/1
• openwall.com/lists/oss-security/2012/04/30/3
• silverstripe/sapphire commit 73cca09 · Exploit
• silverstripe/sapphire commit ca78784 · Exploit
• silverstripe/silverstripe-cms commit b5ea2f6 · Exploit

Lỗ hổng khác của silverstripe

• CVE-2022-37421TRUNG BÌNH 5.4Silverstripe silverstripe/cms through 4.11.0 allows XSS.
• CVE-2022-28803TRUNG BÌNH 5.4In SilverStripe Framework through 2022-04-07, Stored XSS can occur in javascript link tags added via XMLHttpRequest (XHR).
• CVE-2022-24444TRUNG BÌNH 6.5Silverstripe silverstripe/framework through 4.10 allows Session Fixation.
• CVE-2021-41559TRUNG BÌNH 6.5Silverstripe silverstripe/framework 4.8.1 has a quadratic blowup in Convert::xml2array() that enables a remote attack via a crafted XML docu…
• CVE-2021-28661TRUNG BÌNH 4.3Default SilverStripe GraphQL Server (aka silverstripe/graphql) 3.x through 3.4.1 permission checker not inherited by query subclass.