CVE-2011-5168

Description

References

• bananadance.org/Program-News/Minor-Update-and-New-Theme · Vendor Advisory
• doyoubananadance.com/Program-News/Important-Notice-About-SQLi-Exploit · URL Repurposed
• exploit-db.com/exploits/17919 · Exploit
• osvdb.org/83882
• securityfocus.com/bid/49903

banana dance 的其他漏洞

• CVE-2012-5243中危 5.0functions/suggest.php in Banana Dance B.2.6 and earlier allows remote attackers to read arbitrary database information via a crafted request…
• CVE-2012-5242中危 6.8Directory traversal vulnerability in functions/suggest.php in Banana Dance B.2.6 and earlier allows remote attackers to include and execute …
• CVE-2012-5244高危 7.5Multiple SQL injection vulnerabilities in Banana Dance B.2.6 and earlier allow remote attackers to execute arbitrary SQL commands via the (1…
• CVE-2011-5176中危 4.3Multiple cross-site scripting (XSS) vulnerabilities in search.php in Banana Dance, possibly B.1.5 and earlier, allow remote attackers to inj…
• CVE-2011-5175高危 7.5SQL injection vulnerability in search.php in Banana Dance, possibly B.1.5 and earlier, allows remote attackers to execute arbitrary SQL comm…