CVE-2010-1994

Description

References

• holisticinfosec.org/content/view/141/45
• osvdb.org/64551
• secunia.com/advisories/39320 · Vendor Advisory
• secunia.com/secunia_research/2010-56 · Vendor Advisory
• securityfocus.com/archive/1/511273/100/0/threaded
• securityfocus.com/bid/40108
• exchange.xforce.ibmcloud.com/vulnerabilities/58470

tomatocms 的其他漏洞

• CVE-2010-2282中危 5.1Cross-site request forgery (CSRF) vulnerability in TomatoCMS 2.0.6 allows remote attackers to hijack the authentication of administrators fo…
• CVE-2010-2281中危 4.3Multiple cross-site scripting (XSS) vulnerabilities in index.php in TomatoCMS 2.0.6 allow remote attackers to inject arbitrary web script or…
• CVE-2010-1515低危 2.6Multiple cross-site scripting (XSS) vulnerabilities in index.php in TomatoCMS 2.0.6 and earlier allow remote attackers to inject arbitrary w…
• CVE-2010-1514中危 6.0Unrestricted file upload vulnerability in TomatoCMS 2.0.6 and earlier allows remote authenticated users, with certain privileges, to execute…
• CVE-2010-1996低危 2.1Multiple cross-site scripting (XSS) vulnerabilities in index.php in TomatoCMS before 2.0.5 allow remote authenticated users, with certain cr…