English
¢¸¢· µÚ·Î
Ãë¾àÁ¡ID 21971
À§Çèµµ 40
Æ÷Æ® 80, ...
ÇÁ·ÎÅäÄÝ TCP
ºÐ·ù CGI
»ó¼¼¼³¸í ÇØ´ç Joomla! ÇÁ·Î±×·¥Àº 1.0.11 ÀÌÀüÀÇ ¹öÀüµé¿¡ Á¸ÀçÇÏ´Â ´ÙÁßÀÇ Ãë¾àÁ¡µé¿¡ Ãë¾àÇÏ´Ù. Joomla!´Â PHP·Î Á¦ÀÛµÈ °ø°³ ¼Ò½º ÄÜÅÙÃ÷ °ü¸® ½Ã½ºÅÛÀÌ´Ù. Joomla! 1.0.11 ÀÌÀüÀÇ ¹öÀüµéÀº 'administrator/index.php' ½ºÅ©¸³Æ®¸¦ ÅëÇÑ ´ÙÁßÀÇ Ãë¾àÁ¡µé¿¡ Ãë¾àÇÏ´Ù. ÀÌ Ãë¾àÁ¡µéÀº ¿ø°ÝÁöÀÇ °ø°ÝÀÚ°¡ cross-site scripting °ø°ÝÀ» ¼öÇàÇÏ°í ÀÓÀÇÀÇ Äڵ带 ½ÇÇàÇϴµ¥ µµ¿ëµÉ ¼ö ÀÖ°í, ÀáÀçÀûÀ¸·Î ¸¹Àº ´Ù¸¥ °ËÁõ °áÇԵ鿡 ÀÇÇØ ¿µÇâÀ» ¹ÞÀ» ¼ö ÀÖ´Ù.

* Âü°í »çÀÌÆ®:
http://www.joomla.org/content/view/1843/74/
http://www.securityfocus.com/archive/1/444743

* ¿µÇâÀ» ¹Þ´Â Ç÷§Æû:
Joomla! 1.0.11 ÀÌÀüÀÇ ¹öÀüµé
¸ðµç ¿î¿µÃ¼Á¦ ¸ðµç ¹öÀü
ÇØ°áÃ¥ Joomla! À¥ »çÀÌÆ®ÀÎ http://www.joomla.org/component/option,com_frontpage/Itemid,1/ ¿¡¼­ ±¸ÇÒ ¼ö ÀÖ´Â Joomla!ÀÇ °¡Àå ÃֽŠ¹öÀü(1.0.11 ȤÀº ÀÌÈÄ)À¸·Î ¾÷±×·¹À̵å ÇÏ¿©¾ß ÇÑ´Ù.
°ü·Ã URL (CVE)
°ü·Ã URL (SecurityFocus)
°ü·Ã URL (ISS)