557 matches found
PHPSay World v1.0 user.php SQL注入漏洞
user.php id参数未经过过滤，导致SQL注入漏洞。 0 v1.0 更新到最新版本...
MediaWiki 'theloadFromSession'函数信息泄露漏洞
BUGTRAQ ID：65883 CVE ID：CVE-2014-2243 MediaWiki是一款Wiki程序。 MediaWiki的includes/User.php脚本'theloadFromSession'函数存在安全漏洞。远程攻击者可通过实施暴力破解攻击利用该漏洞获取会话令牌的访问权限。 0 MediaWiki Mediawiki 2.0.18 MediaWiki Mediawiki = 1.19.11 MediaWiki Mediawiki 1.20.x MediaWiki Mediawiki 1.21.x1.21.6 MediaWiki Mediawiki...
Design/Logic Flaw
includes/User.php in MediaWiki before 1.19.12, 1.20.x and 1.21.x before 1.21.6, and 1.22.x before 1.22.3 terminates validation of a user token upon encountering the first incorrect character, which makes it easier for remote attackers to obtain access via a brute-force attack that relies on timin...
CVE-2014-2243
includes/User.php in MediaWiki before 1.19.12, 1.20.x and 1.21.x before 1.21.6, and 1.22.x before 1.22.3 terminates validation of a user token upon encountering the first incorrect character, which makes it easier for remote attackers to obtain access via a brute-force attack that relies on timin...
CVE-2014-2243
includes/User.php in MediaWiki before 1.19.12, 1.20.x and 1.21.x before 1.21.6, and 1.22.x before 1.22.3 terminates validation of a user token upon encountering the first incorrect character, which makes it easier for remote attackers to obtain access via a brute-force attack that relies on timin...
CVE-2014-2243: Concurrent Execution using Shared Resource with Improper Synchronization
includes/User.php in MediaWiki before 1.19.12, 1.20.x and 1.21.x before 1.21.6, and 1.22.x before 1.22.3 terminates validation of a user token upon encountering the first incorrect character, which makes it easier for remote attackers to obtain access via a brute-force attack that relies on timin...
ecshop绕过原密码校验直接修改用户密码（安全隐患）
简要描述： 最新版本也存在此问题 详细说明： 该漏洞有个前提，需要会员系统整合ucenter 问题出在 user.php $action == 'acteditpassword' $oldpassword = isset$POST'oldpassword' ? trim$POST'oldpassword' : ''; $newpassword = isset$POST'newpassword' ? trim$POST'newpassword' : ''; $userid = isset$POST'uid' ? intval$POST'uid' : $userid; $code =...
Cells Blog 3.3跨站脚本和SQL注入漏洞
No description provided by source. 1 Reflective XSS on 'msg=' PoC: http://localhost/cells-v3-3/errmsg.php?msg= %3C%2Fp%3E%3Cscript%3Ealert%28%27XSS%27%29%3B%3C%2Fscript%3E%3Cp%3E Vulnerable Code: + errmsg.php ? echo "img src='images/error.gif'"; if isset$GET"msg"$msg=$GET"msg";else$msg=""; if...
Cells Blog 3.3 - Reflected Cross-Site Scripting / Blind SQLite Injection
Exploit: Cells v3.3 XSS Reflected & Blind SQLite Injection + Author: vinicius777 + Contact: vinicius777 AT gmail @vinicius777 + version: Cells Blog 3.3 + Vendor Homepage: http://cells.tw + 14/01/2014 vendor contacted + 17/01/2014 no response from vendor + 20/01/2014 no response from vendor +...
Cells Blog 3.3 - XSS Reflected & Blind SQLite Injection Vulnerabilities
Exploit for php platform in category web applications + Exploit: Cells v3.3 XSS Reflected & Blind SQLite Injection + Author: vinicius777 + Contact: vinicius777 AT gmail @vinicius777 + version: Cells Blog 3.3 + Vendor Homepage: http://cells.tw + 14/01/2014 vendor contacted + 17/01/2014 no response...
CVE-2012-6626
The CVE-2012-6626 entry concerns a SQL injection in verify-user.php of b2ePMS 1.0 where the username field can be exploited to execute arbitrary SQL commands. Affected software: b2ePMS 1.0 (verify-user.php). Underlying cause: input from the username field is not properly sanitized, enabling injec...
CVE-2012-6626: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in verify-user.php in b2ePMS 1.0 allows remote attackers to execute arbitrary SQL commands via the username field...
HDWiki 5.1 user.php SQL注入漏洞
No description provided by source...
Basic Forum by JM LLC - Multiple Vulnerabilities
Basic Forum by JM LLC - Multiple Vulnerabilities Dear Offensive Security, I have discovered some vulnerabilities in Basic Forum, developed by JM LLC. Best regards, Sp3ctrecore ADVISORY ================================================ Basic Forum by JM LLC - Multiple Vulnerabilities...
EASETHINK 1.4 /user.php SQL注入漏洞
易想团购是国内一款流行的团购管理系统软件，其v1.4版本/user.php文件代码第294行$REQUEST变量获取$id变量值，执行295行代码，拼接sql语句，执行sql语句，返回查询结果，执行代码第296-299行，判断返回结果是否为真，如果为真则执行代码第301-305行，登陆成功，执行代码第305行，拼接sql语句，其中的getclientip方法在，/system/common.php文件中定义，getclientip方法没有将值进行过滤。此过程导致任意用户登陆与SQL注入漏洞。 EASETHINK 1.4...
HDWiki 5.1 /control/user.php SQL注入漏洞
No description provided by source...
The latest wordpress proof absolute path method-vulnerability warning-the black bar safety net
Vulnerability file: /wp-includes/user.php...
Ecshop 2.7.3 user.php Sql注入
No description provided by source...
