Insane Visions OneCMS

ソフト名：Insane Visions OneCMS 2.4～2.6.2
回避策：未対応
脆弱性：XSS, 認証資格情報の奪取, SQLインジェクション
ソース：http://www.htbridge.ch/advisory/xss_vulnerability_in_onecms.html
http://www.htbridge.ch/advisory/sql_injection_vulnerability_in_onecms_search_module.html
http://www.htbridge.ch/advisory/xss_vulnerability_in_news_module_of_onecms.html
http://holisticinfosec.org/content/view/142/45/
http://sourceforge.net/projects/onecms/
http://www.securityfocus.com/bid/41194
http://secunia.com/advisories/39395
http://www.vupen.com/english/advisories/2010/1627
危険性：Medium Risk