109 matches found
MetInfo 5.3 \message\message.php 存储型 XSS 漏洞
MetInfo5.3,从官网下的最新安装包之后，在自己的服务器上面搭建之后正式开始测试 首先来看问题页面 MetInfo5.3\message\message.php 这个文件里面 php if!$Captcha-CheckCode$code echo" alert'$langmembercode'; window.history.back;"; exit; 该段代码里面去除了SCRIPT关键字，所以当我们直接提交的时候 用户提交那块会直接清空，管理员则是去除关键字 现在我们触发该存储XSS 测试过程： alert'test' 我们将该测试xss进行编码 编码方式为HTML实体（DEC）...
kppw最新版前台sql注入
简要描述： 我这么认真，你们还是给我点对应的rank吧 详细说明： 算上关联的函数，本来还有很多的，我自己也没有找了， 我测试的是utf版本的，你们gbk版本由于这个问题已经炸了，希望好好审查 下面我拿 control\user\messagesend.php文件举例，同样问题的我找的还有 message.php,yijia.php setUid $gUid ; $objMsgM-setUsername $username ; $objMsgM-setTouid $arrSpaceInfo 'uid' ; $objMsgM-setTousername $arrSpaceInfo...
benjunto.com XSS vulnerability
Vulnerable URL: http://benjunto.com/message.php?subject=" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated Google Pagerank| 3 VIP website status:| No Check...
Doyo建站 SQL注入
简要描述： 两头牛在一起吃草，青牛问黑牛：“喂！你的草是什么味道？” 黑牛道：“草莓味！” 青牛靠过来吃了一口，愤怒地喊到：“你骗我！” 黑牛轻蔑地看他一眼，回道：“笨蛋，我说草没味。” 详细说明： 1 source\message.php function add if$GLOBALS'GDY''vercode'==1 if!$this-syArgs"vercode",1||md5strtolower$this-syArgs"vercode",1!=$SESSION'doyoverify'message"验证码错误"; if!$this-syArgs'tid'message"请选择栏目...
PT-2014-8777
Name of the Vulnerable Software and Affected Versions X7 Chat versions 2.0.0 through 2.0.5.1 Description The issue allows remote authenticated users to execute arbitrary PHP code via a crafted HTTP header to "index.php", which is processed by the preg replace function with the eval switch. This c...
CVE-2014-8998: Improper Control of Generation of Code
lib/message.php in X7 Chat 2.0.0 through 2.0.5.1 allows remote authenticated users to execute arbitrary PHP code via a crafted HTTP header to index.php, which is processed by the pregreplace function with the eval switch...
X7 Chat 2.0.5 lib/message.php preg_replace() PHP Code Execution Exploit
This Metasploit module exploits a post-auth vulnerability found in X7 Chat versions 2.0.0 up to 2.0.5.1. The vulnerable code exists on lib/message.php, which uses pregreplace function with the /e modifier. This allows a remote authenticated attacker to execute arbitrary PHP code in the remote...
CityPost PHP LNKX 52.0 Message.PHP Cross-Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/13255/info CityPost PHP LNKX is affected by a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input to the 'message.php' script. An attacker may...
DOYO 2.3 /message.php SQL注入漏洞
Doyo 2.3...
PT-2014-4893
Name of the Vulnerable Software and Affected Versions MODX Revolution versions prior to 2.2.14 Description The issue allows remote attackers to execute arbitrary SQL commands. This can be achieved via the session ID PHPSESSID to index.php. Additionally, remote authenticated users can execute...
CVE-2014-2736: Improper Neutralization of Special Elements used in an SQL Command
Multiple SQL injection vulnerabilities in MODX Revolution before 2.2.14 allow remote attackers to execute arbitrary SQL commands via the 1 session ID PHPSESSID to index.php or remote authenticated users to execute arbitrary SQL commands via the 2 user parameter to connectors/security/message.php ...
destoon /v5.0/ 存储型xss指哪打哪
简要描述： 存储型xss 指哪打哪 详细说明： 注册一个用户 http://127.0.0.1/v5.0/member/message.php?action=send&touser=oboi123&title=RE:RE%3ARE%3Asdaaaaaaa 回复处用了编辑器 编辑器有些标签没过滤，导致xss执行 xsscode: object 经过base64 可形成xss语句 漏洞证明：...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in Dokeos 2.1.1 allow remote attackers to inject arbitrary web script or HTML via the 1 Phone, 2 Street, 3 Address line, 4 Zip code, or 5 City field to main/auth/profile.php; 6 Subject field to main/social/groups.php; or 7 Message body field to...
PT-2014-4336
Name of the Vulnerable Software and Affected Versions Dokeos version 2.1.1 Description The issue allows remote attackers to inject arbitrary web script or HTML via several fields, including the Phone, Street, Address line, Zip code, or City field to "main/auth/profile.php", the Subject field to...
PT-2014-4363
Name of the Vulnerable Software and Affected Versions Command School Student Management System version 1.06.01 Description The issue concerns multiple cross-site scripting XSS vulnerabilities. These vulnerabilities allow remote attackers to inject arbitrary web script or HTML. Specifically, the...
CVE-2014-1914: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in Command School Student Management System 1.06.01 allow remote attackers to inject arbitrary web script or HTML via the 1 topic parameter to sw/addtopic.php or 2 nick parameter to sw/chat/message.php...
PHPWind 6.0 multiple cross-site scripting vulnerability-vulnerability warning-the black bar safety net
PHPWind is a domestic of the more popular PHP-based Web forum application. PHPWind 在 访客 注销 时 没有 正确 的 过滤 提交 给 hack.php and search.php and read.php and post.php and thread.php and profile.php and sort.php and message.php and userpay. php, etc. page of request parameters, a remote attacker can submi...
PHPWind 6.0 Cross Site Scripting
I found the PHPWind v6.0 just filter the xss code when the visitors login in, but it doesnt do it when login off. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This flaw makes its all the parameters...
