CVE-2009-1433

SQL injection vulnerability in File::find filesystem/File.php in SilverStripe before 2.3.1 allows remote attackers to execute arbitrary SQL commands via the filename parameter...

CVE-2009-1433

SQL injection vulnerability in File::find filesystem/File.php in SilverStripe before 2.3.1 allows remote attackers to execute arbitrary SQL commands via the filename parameter...

CVE-2009-1433: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in File::find filesystem/File.php in SilverStripe before 2.3.1 allows remote attackers to execute arbitrary SQL commands via the filename parameter...

Perl File::Find::Object模块格式串漏洞

BUGTRAQ ID: 31938 CNCAN ID：CNCAN-2008102803 Perl File::Find::Object是一款面向对象的File::Find替代程序。 Perl File::Find::Object处理部分循环条件时存在格式串问题，远程攻击者可以利用漏洞以应用程序权限执行任意指令。 由于文件名不正确过滤传递给printf STDERR，可导致触发典型的格式串错误，如果应用程序利用这个库扫描目录树，可以应用程序权限执行任意指令。 Olivier Thauvin File::Find::Object 0.1 可升级到File::Find::Object...