CVE-2008-5584

Description

References

• secunia.com/advisories/29016 · Vendor Advisory
• securityreason.com/securityalert/4734
• projectpier.org/node/679 · Patch
• securityfocus.com/archive/1/488294/100/200/threaded
• securityfocus.com/bid/27857

projectpier 的其他漏洞

• CVE-2013-3637中危 5.4ProjectPier 0.8.8 does not use the Secure flag for cookies
• CVE-2013-3636中危 5.4ProjectPier 0.8.8 has a Remote Information Disclosure Weakness because of the lack of the HttpOnly cookie flag
• CVE-2013-3635中危 5.4ProjectPier 0.8.8 has stored XSS
• CVE-2018-10760高危 8.8Unrestricted file upload vulnerability in the Files plugin in ProjectPier 0.88 and earlier allows remote authenticated users to execute arbi…
• CVE-2018-10759严重 9.8PHP remote file inclusion vulnerability in public/patch/patch.php in Project Pier 0.8.8 and earlier allows remote attackers to execute arbit…