Home > Àüü±â»ç

[12.21 ¹ö±×¸®Æ÷Æ®] CVE-2017-17827 èâ

ÀÔ·Â : 2017-12-21 18:08
ÆäÀ̽ººÏ º¸³»±â Æ®À§ÅÍ º¸³»±â ³×À̹ö ¹êµå º¸³»±â īī¿À ½ºÅ丮 º¸³»±â ³×À̹ö ºí·Î±× º¸³»±â
CVE-2017-17827, CVE-2017-17828, CVE-2017-17829
CVE-2017-17830, CVE-2017-17831


[º¸¾È´º½º ¹®°¡¿ë ±âÀÚ] ÇöÁö ½Ã°¢À¸·Î 12¿ù 20ÀÏ, ¿ì¸®³ª¶ó ½Ã°£À¸·Î´Â ´ë·« 20ÀÏ¿¡¼­ 21ÀÏ·Î ³Ñ¾î¿À´Â ¹ã »çÀÌ¿¡ ¹Ì±¹ÀÇ National Vulnerability DatabaseÀ» ÅëÇØ ¹ßÇ¥µÈ Ãë¾àÁ¡µéÀÌ´Ù.

[À̹ÌÁö = iclickart]


1. CVE-2017-17827
Piwigo 2.9.2 ¹öÀüÀÇ /admin.php?page=configuration¡×ion=main ȤÀº /admin.php?page=batch_manager&mode=unitÀÇ CSRF Ãë¾àÁ¡ÀÌ´Ù.

2. CVE-2017-17828
Bus Booking ScriptÀÇ results.php datepicker ¸Å°³º¯¼ö³ª admin/new_master.php spemail ¸Å°³º¯¼öÀÇ XSS Ãë¾àÁ¡ÀÌ´Ù.

3. CVE-2017-17829
Bus Booking ScriptÀÇ admin/view_seatseller.php sp_id ¸Å°³º¯¼ö³ª admin/view_member.php memid ¸Å°³º¯¼öÀÇ SQL ÁÖÀÔ Ãë¾àÁ¡ÀÌ´Ù.

4. CVE-2017-17830
Bus Booking ScriptÀÇ admin/new_master.phpÀÇ CSRF Ãë¾àÁ¡ÀÌ´Ù.

5. CVE-2017-17831
GitHub Git LFS 2.1.1 ÀÌÀü ¹öÀüÀÇ Ãë¾àÁ¡À¸·Î ¿ø°ÝÀÇ °ø°ÝÀÚµéÀÌ ÀÓÀÇÀÇ ¸í·ÉÀ» ½ÇÇàÇÒ ¼ö ÀÖ°Ô ÇØÁØ´Ù.
[±¹Á¦ºÎ ¹®°¡¿ë ±âÀÚ(globoan@boannews.com)]

<ÀúÀÛ±ÇÀÚ: º¸¾È´º½º(www.boannews.com) ¹«´ÜÀüÀç-Àç¹èÆ÷±ÝÁö>

  •  
  • 1
  • ÆäÀ̽ººÏ º¸³»±â Æ®À§ÅÍ º¸³»±â ³×À̹ö ¹êµå º¸³»±â īī¿À ½ºÅ丮 º¸³»±â ³×À̹ö ºí·Î±× º¸³»±â

  • ¡°
  •  SNS¿¡¼­µµ º¸¾È´º½º¸¦ ¹Þ¾Æº¸¼¼¿ä!! 
  • ¡±
2025 º¸¾È½ÃÀå ¹é¼­ À§Áîµð¿£¿¡½º 2018
¼³¹®Á¶»ç
SKÅÚ·¹ÄÞ ÇØÅ· »çÅ·ΠÃÖ±Ù ÀÕ½´°¡ µÇ°í ÀÖ´Â ¡®BPFµµ¾î¡¯ °ü·Ã, ¾î¶² ¼Ö·ç¼ÇÀ» »ç¿ëÁßÀΰ¡¿ä?
¾È·¦ V3 Net for Linux
¼Ò¸¸»ç Server-i
ÆÄÀÌ¿À¸µÅ© Á¡°Ë µµ±¸
À×Ä«ÀÎÅÍ³Ý Àü¿ë ¹é½Å
Æ®·»µå ¸¶ÀÌÅ©·Î ¹é½Å
±âŸ ±¹»ê(¼Ö·ç¼Ç¸íÀº ´ñ±Û·Î)
±âŸ ¿Ü»ê(¼Ö·ç¼Ç¸íÀº ´ñ±Û·Î)
»ç¿ëÇÏÁö ¾Ê´Â´Ù