CVE-2006-4581

Description

References

• osvdb.org/32560
• secunia.com/advisories/21694 · Vendor Advisory
• secunia.com/secunia_research/2006-76/advisory · Vendor Advisory
• securityfocus.com/bid/21870
• exchange.xforce.ibmcloud.com/vulnerabilities/31250

the address book 的其他漏洞

• CVE-2006-4582中危 5.0Cross-site request forgery (CSRF) vulnerability in The Address Book 1.04e allows remote attackers to perform unauthorized actions as other u…
• CVE-2006-4580高危 7.5register.php in The Address Book 1.04e allows remote attackers to bypass the "Allow User Self-Registration" setting and create arbitrary use…
• CVE-2006-4579中危 5.0Directory traversal vulnerability in users.php in The Address Book 1.04e allows remote attackers to include arbitrary files via a .. (dot do…
• CVE-2006-4578高危 7.5export.php in The Address Book 1.04e writes username and password hash information into a publicly accessible file when dumping the MySQL da…
• CVE-2006-4577中危 6.8Multiple cross-site scripting (XSS) vulnerabilities in The Address Book 1.04e allow remote attackers to inject arbitrary web script or HTML …