CVE-2007-6695

Description

References

• osvdb.org/41199
• digitrustgroup.com/advisories/web-application-security-drake_cms.html · Exploit
• securityfocus.com/bid/27459 · Exploit
• exchange.xforce.ibmcloud.com/vulnerabilities/39976

drake cms 的其他漏洞

• CVE-2008-6475高危 7.5SQL injection vulnerability in the guestbook component (components/guestbook/guestbook.php) in Drake CMS 0.4.11 and earlier allows remote at…
• CVE-2008-1371低危 3.6Absolute path traversal vulnerability in install/index.php in Drake CMS 0.4.11 RC8 allows remote attackers to read and execute arbitrary fil…
• CVE-2007-2618中危 5.1CRLF injection vulnerability in index.php in Drake CMS 0.4.0 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP respo…
• CVE-2007-1849高危 7.5Directory traversal vulnerability in 404.php in Drake CMS allows remote attackers to include and execute arbitrary local arbitrary files via…
• CVE-2007-1848中危 4.3Cross-site scripting (XSS) vulnerability in admin/classes/ui.dta.php in Drake CMS allows remote attackers to inject arbitrary web script or …