CVE-2014-2866

Mô tả

Tham khảo

• kb.cert.org/vuls/id/437385 · US Government Resource

Lỗ hổng khác của commonspot content server

• CVE-2014-2874NGHIÊM TRỌNG 10.0PaperThin CommonSpot before 7.0.2 and 8.x before 8.0.3 allows remote attackers to execute arbitrary code via shell metacharacters in an unsp…
• CVE-2014-2873TRUNG BÌNH 5.0PaperThin CommonSpot before 7.0.2 and 8.x before 8.0.3 does not require authentication for access to log files, which allows remote attacker…
• CVE-2014-2872TRUNG BÌNH 5.0PaperThin CommonSpot before 7.0.2 and 8.x before 8.0.3 allows remote attackers to obtain potentially sensitive information from a directory …
• CVE-2014-2871TRUNG BÌNH 5.0PaperThin CommonSpot before 7.0.2 and 8.x before 8.0.3 relies on an HTTP session for entering credentials on login pages, which allows remot…
• CVE-2014-2870TRUNG BÌNH 5.0The default configuration of PaperThin CommonSpot before 7.0.2 and 8.x before 8.0.3 uses cleartext for storage of credentials in a database,…