CVE-2011-5175

Mô tả

Tham khảo

• packetstormsecurity.org/files/115772/Banana-Dance-CMS-B.2.1-XSS-SQL-Injection.html · Exploit
• bananadance.org/Program-News/Minor-Update-and-New-Theme · Vendor Advisory
• doyoubananadance.com/Program-News/Important-Notice-About-SQLi-Exploit · URL Repurposed

Lỗ hổng khác của banana dance

• CVE-2012-5243TRUNG BÌNH 5.0functions/suggest.php in Banana Dance B.2.6 and earlier allows remote attackers to read arbitrary database information via a crafted request…
• CVE-2012-5242TRUNG BÌNH 6.8Directory traversal vulnerability in functions/suggest.php in Banana Dance B.2.6 and earlier allows remote attackers to include and execute …
• CVE-2012-5244CAO 7.5Multiple SQL injection vulnerabilities in Banana Dance B.2.6 and earlier allow remote attackers to execute arbitrary SQL commands via the (1…
• CVE-2011-5176TRUNG BÌNH 4.3Multiple cross-site scripting (XSS) vulnerabilities in search.php in Banana Dance, possibly B.1.5 and earlier, allow remote attackers to inj…
• CVE-2011-5168CAO 7.5SQL injection vulnerability in user.php in Banana Dance before B.1.5 allows remote attackers to execute arbitrary SQL commands via the id pa…