CVE-2008-1906

Description

References

• bugreport.ir/index.php · Exploit
• secunia.com/advisories/29807
• securityfocus.com/bid/28755 · Exploit
• vupen.com/english/advisories/2008/1213/references
• exchange.xforce.ibmcloud.com/vulnerabilities/41780
• exploit-db.com/exploits/5437

cpcommerce 的其他漏洞

• CVE-2009-1345高危 7.5SQL injection vulnerability in document.php in cpCommerce 1.2.8 allows remote attackers to execute arbitrary SQL commands via the id_documen…
• CVE-2008-4637中危 4.3Cross-site scripting (XSS) vulnerability in cpCommerce before 1.2.4 allows remote attackers to inject arbitrary web script or HTML via unkno…
• CVE-2008-4121中危 4.3Multiple cross-site scripting (XSS) vulnerabilities in cpCommerce before 1.2.4 allow remote attackers to inject arbitrary web script or HTML…
• CVE-2008-1908高危 7.5Multiple directory traversal vulnerabilities in cpCommerce 1.1.0 allow remote attackers to include and execute arbitrary local files via a .…
• CVE-2008-1907高危 7.5Multiple SQL injection vulnerabilities in functions/display_page.func.php in cpCommerce 1.1.0 allow remote attackers to execute arbitrary SQ…