shopex旗下,ecshop跨站漏洞

简要描述： ecshop的跨站漏洞 详细说明： 在ecshop的根目录下的 user.php文件第57行中,未对url返回做过滤 如下 $backact = 'user.php?' . $SERVER'QUERYSTRING'; 未对$SERVER'QUERYSTRING';做过滤 即用户的url框中提交项.以此可插入js或html代码执行 漏洞证明： url如下: http://www.ecshop.cn/user.php?1'"/1prompt123456789...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Dolibarr 3.1.0 allow remote attackers to inject arbitrary web script or HTML via 1 the username parameter in a setup action to admin/company.php, or the PATHINFO to 2 admin/securityother.php, 3 admin/events.php, or 4 admin/user.php...

CVE-2011-4329: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Dolibarr 3.1.0 allow remote attackers to inject arbitrary web script or HTML via 1 the username parameter in a setup action to admin/company.php, or the PATHINFO to 2 admin/securityother.php, 3 admin/events.php, or 4 admin/user.php...

tipask question Answering System 1. 4 upload vulnerability-vulnerability warning-the black bar safety net

user.php the user operation function oneditimg //modify avatar if isset$FILES"Filedata" $uploadtmppath = "data/tmp/"; $fileName = 'bigavatar' . $this-user'uid' . '.' . substr$FILES"Filedata"'name', -3; moveuploadedfile$FILES"Filedata""tmpname", $uploadtmppath . $fileName; //This directly...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in users.php in NinkoBB 1.3 RC5 allow remote attackers to inject arbitrary web script or HTML via the 1 firstname, 2 lastname, 3 msn, or 4 aim parameter...

CVE-2011-1766

includes/User.php in MediaWiki before 1.16.5, when wgBlockDisablesLogin is enabled, does not clear certain cached data after verification of an auth token fails, which allows remote attackers to bypass authentication by creating crafted wikiUserID and wikiUserName cookies, or by leveraging an...

CVE-2011-1766

includes/User.php in MediaWiki before 1.16.5, when wgBlockDisablesLogin is enabled, does not clear certain cached data after verification of an auth token fails, which allows remote attackers to bypass authentication by creating crafted wikiUserID and wikiUserName cookies, or by leveraging an...

CVE-2011-1766: Improper Authentication

includes/User.php in MediaWiki before 1.16.5, when wgBlockDisablesLogin is enabled, does not clear certain cached data after verification of an auth token fails, which allows remote attackers to bypass authentication by creating crafted wikiUserID and wikiUserName cookies, or by leveraging an...

Web 2.0 Social Network Freunde Community - SQL Injection

Exploit Title: Web 2.0 Social Network Freunde Community SQL Injection Vunerability Google Dork: inurl:"user.php?userId=" +site:de Date: 08.02.2011 Author: NoNameMT Software Link: http://www.scripteverkauf.com/products/de/neuheiten/web-20-social-network-freunde-community.html Version: - Price: 79,...

Web 2.0 Social Network Freunde Community - SQL Injection

Web 2.0 Social Network Freunde Community - SQL Injection Exploit Title: Web 2.0 Social Network Freunde Community SQL Injection Vunerability Google Dork: inurl:"user.php?userId=" +site:de Date: 08.02.2011 Author: NoNameMT Software Link:...

CVE-2011-0506: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in modules/profile/user.php in Ax Developer CMS AxDCMS 0.1.1 allows remote attackers to execute arbitrary code via a .. dot dot in the aXconfdefaultlanguage parameter...

axdcms-0.1.1 Local File Include Vulnerbility

Exploit for php platform in category web applications axdcms-0.1.1 === Local File Include Vulnerbility Author : n0n0x Homepage: http://priasantai.uni.cc/ Download script : http://biznetnetworks.dl.sourceforge.net/project/axdcms/axdcms/0.1.1/axdcms-0.1.1.zip exploit :...

Siteframe 3.2.3 (user.php) SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Siteframe 'user.php' SQL Injection Vulnerability Google Dork: "powered by Siteframe" Date: 29/12/2010 Author: AnGrY BoY Software Link: http://sitefrane.org/downloads/ Version: Siteframe 3.2.3 Tested on: windows SP2 CVE : N/A...

Siteframe CMS 3.2.3 - user.php SQL Injection

Siteframe CMS 3.2.3 - user.php SQL Injection Exploit Title: Siteframe 'user.php' SQL Injection Vulnerability Google Dork: "powered by Siteframe" Date: 29/12/2010 Author: AnGrY BoY Software Link: http://sitefrane.org/downloads/ Version: Siteframe 3.2.3 Tested on: windows SP2 CVE : N/A expolit:...

Siteframe CMS 3.2.3 - 'user.php' SQL Injection

Exploit Title: Siteframe 'user.php' SQL Injection Vulnerability Google Dork: "powered by Siteframe" Date: 29/12/2010 Author: AnGrY BoY Software Link: http://sitefrane.org/downloads/ Version: Siteframe 3.2.3 Tested on: windows SP2 CVE : N/A expolit: http://localhost/path/user.php?id=SQL...

Siteframe 3.2.3 SQL Injection

Exploit Title: Siteframe 'user.php' SQL Injection Vulnerability Google Dork: "powered by Siteframe" Date: 29/12/2010 Author: AnGrY BoY Software Link: http://sitefrane.org/downloads/ Version: Siteframe 3.2.3 Tested on: windows SP2 CVE : N/A expolit: http://localhost/path/user.php?id=SQL...

Sql injection

Multiple SQL injection vulnerabilities in wpQuiz 2.7 allow remote attackers to execute arbitrary SQL commands via the 1 id and 2 password pw parameters to a admin.php or b user.php...

CVE-2010-3608

Multiple SQL injection vulnerabilities in wpQuiz 2.7 allow remote attackers to execute arbitrary SQL commands via the 1 id and 2 password pw parameters to a admin.php or b user.php...

CVE-2010-3608: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in wpQuiz 2.7 allow remote attackers to execute arbitrary SQL commands via the 1 id and 2 password pw parameters to a admin.php or b user.php...

cms carfari v1.0 (user.php) SQL Injection Vulnerability

Exploit for php platform in category web applications ======================================================= cms carfari v1.0 user.php SQL Injection Vulnerability ======================================================= 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 ...