EDB-4693webappsphp検証済み

SineCMS 2.3.4 - Calendar SQL Injection

KiNgOfThEwOrLd12/5/2007

Exploit-DBで表示 GitLabでソースを表示

AI分析AIによる分析

エクスプロイトコード

Exploit code not available in database

GitLabでソースを表示

CVE-2007-6367

NONE

Multiple cross-site scripting (XSS) vulnerabilities in the guestbook in SineCMS 2.3.4 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) username (user) or (2) comme

Multiple cross-site scripting (XSS) vulnerabilities in the guestbook in SineCMS 2.3.4 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) username (user) or (2) comme...

12/15/2007CWE-79

CVE-2007-6366

NONE

Multiple SQL injection vulnerabilities in SineCMS 2.3.4 and earlier allow remote attackers to execute arbitrary SQL commands via (1) the id parameter to mods/Calendar/index.php, accessed through a Cal

Multiple SQL injection vulnerabilities in SineCMS 2.3.4 and earlier allow remote attackers to execute arbitrary SQL commands via (1) the id parameter to mods/Calendar/index.php, accessed through a Cal...

12/15/2007CWE-89