CVE-2007-4541

Description

References

• myimei.com/security/2007-08-22/olate-download-342modulescorefldmphpcomments-tag-url-xss.html
• myimei.com/security/2007-08-22/olate-download-342modulescoreuimphpxss.html
• osvdb.org/39710
• osvdb.org/39711
• secunia.com/advisories/26565 · Vendor Advisory
• securityreason.com/securityalert/3076
• securityfocus.com/archive/1/477337/100/0/threaded
• securityfocus.com/archive/1/477338/100/0/threaded
• securityfocus.com/bid/25412 · Exploit
• exchange.xforce.ibmcloud.com/vulnerabilities/36196
• exchange.xforce.ibmcloud.com/vulnerabilities/36197

olatedownload 的其他漏洞

• CVE-2007-4540高危 7.5Multiple SQL injection vulnerabilities in download.php in Olate Download (od) 3.4.2 allow remote attackers to execute arbitrary SQL commands…
• CVE-2007-4454中危 6.8Eval injection vulnerability in environment.php in Olate Download (od) 3.4.1 allows context-dependent attackers to execute arbitrary code vi…
• CVE-2007-4421严重 9.3SQL injection vulnerability in Admin.php in Olate Download (od) 3.4.1 allows remote attackers to execute arbitrary SQL commands via an OD3_A…
• CVE-2007-4419严重 9.3Admin.php in Olate Download (od) 3.4.1 uses an MD5 hash of the admin username, user id, and group id, to compose the OD3_AutoLogin authentic…
• CVE-2006-5145高危 7.5Multiple SQL injection vulnerabilities in OlateDownload 3.4.0 allow remote attackers to execute arbitrary SQL commands via the (1) page para…