JVNDB-2006-001312

Grayscale BandSite CMS における重要な情報を取得される脆弱性

Grayscale BandSite CMS は、エラーメッセージにパスを表示する不備があるため、重要な情報を取得される脆弱性が存在します。

grayscale

• bandsite cms

第三者により、以下への直接リクエストを介して、重要な情報を取得される可能性があります。
(1) includes/content ディレクトリ内の特定のファイル
(2) includes/shows_preview.php
(3) adminpanel/configform.php
(4) adminpanel/includes/ 内の mailinglist/disphtmltbl.php
(5) adminpanel/includes/ 内の mailinglist/dispxls.php
(6) adminpanel/includes/ 内の mailinglist/sendshows.php
(7) adminpanel/includes/ 内の previews/preview_bio.php
(8) adminpanel/includes/ 内の previews/preview_genmerch.php
(9) adminpanel/includes/ 内の previews/preview_fliers.php
(10) adminpanel/includes/ 内の previews/preview_gbook.php
(11) adminpanel/includes/ 内の previews/preview_interviews.php
(12) adminpanel/includes/ 内の previews/preview_links.php
(13) adminpanel/includes/ 内の previews/preview_lyrics.php
(14) adminpanel/includes/ 内の previews/preview_membio.php
(15) adminpanel/includes/ 内の previews/preview_merchphotos.php
(16) adminpanel/includes/ 内の previews/preview_mp3s.php
(17) adminpanel/includes/ 内の previews/preview_news.php
(18) adminpanel/includes/ 内の previews/preview_photos.php
(19) adminpanel/includes/ 内の previews/preview_releases.php
(20) adminpanel/includes/ 内の previews/preview_relmerch.php
(21) adminpanel/includes/ 内の previews/preview_relphotos.php
(22) adminpanel/includes/ 内の previews/preview_reviews.php
(23) adminpanel/includes/ 内の previews/preview_shows.php
(24) adminpanel/includes/ 内の previews/preview_wearmerch.php
(25) adminpanel/includes/ 内の change_forms/change_bio.php
(26) adminpanel/includes/ 内の change_forms/change_fliers.php
(27) adminpanel/includes/ 内の change_forms/change_gbook.php
(28) adminpanel/includes/ 内の change_forms/change_gen_merch.php
(29) adminpanel/includes/ 内の change_forms/change_interview.php
(30) adminpanel/includes/ 内の change_forms/change_links.php
(31) adminpanel/includes/ 内の change_forms/change_lyrics.php
(32) adminpanel/includes/ 内の change_forms/change_members.php
(33) adminpanel/includes/ 内の change_forms/change_merch.php
(34) adminpanel/includes/ 内の change_forms/change_merch_pic.php
(35) adminpanel/includes/ 内の change_forms/change_mp3s.php
(36) adminpanel/includes/ 内の change_forms/change_news.php
(37) adminpanel/includes/ 内の change_forms/change_photos.php
(38) adminpanel/includes/ 内の change_forms/change_rel_merch.php
(39) adminpanel/includes/ 内の change_forms/change_rel_pic.php
(40) adminpanel/includes/ 内の change_forms/change_releases.php
(41) adminpanel/includes/ 内の change_forms/change_reviews.php
(42) adminpanel/includes/ 内の change_forms/change_shows.php
(43) adminpanel/includes/ 内の change_forms/change_wear_merch.php

ベンダ情報および参考情報を参照して適切な対策を実施してください。

grayscale

• grayscale : Top Page

1. その他(CWE-Other) [NVD評価]

1. CVE-2006-4986

1. National Vulnerability Database (NVD) : CVE-2006-4986

• [2012年06月26日]
    掲載