7215 matches found
eXtplorer vulnerable to cross-site request forgery
Overview eXtplorer is a web-based file manager. index.php of eXtplorer contains a cross-site request forgery CWE-352 vulnerability. Gen Sato of TRADE WORKS Co.,Ltd. Security Dept. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning...
JVN#92520335: eXtplorer vulnerable to cross-site request forgery
eXtplorer is a web-based file manager. index.php of eXtplorer contains a cross-site request forgery CWE-352 vulnerability. Impact If a user views a malicious page while logged in, the user may be forced to implicitly perform unintended operations such as the execution of arbitrary PHP code...
mao10cms文件包含漏洞（有条件）
简要描述： mao10cms有条件的文件包含漏洞 详细说明： 1.mao10cms采用了mysqli的数据库操作方式，而且所有的数据库操作都是参数绑定的，蛋疼。只有来看一个有条件的文件包含漏洞了。漏洞文件index.php $act; else : require "gdb.php"; endif; 2.这里的$GET'm'直接传入了require，二没有经过过滤，那么就可以考虑截断的文件包含。两种方式，一种是%00，一种是超长文件。两种都有条件，大家懂得。这里以%00为例，注册一个用户，上传一张图片马 然后下面可以获取到图片的路径，直接进行包含...
mcGallery 'lang' Parameter Multiple Cross Site Scripting Vulnerabilities
背景： PhpForums.net mcGallery是一款网站图片管理脚本工具。 类型： xss 影响： 可注入任意web脚本或HTML 分析： PhpForums.net mcGallery 1.1版本中存在多个跨站脚本攻击漏洞。远程攻击者可以借助对 1admin.php, 2index.php, 3sess.php, 4stats.php, 5detail.php, 6resize.php, 7show.php的lang参数，注入任意web脚本或HTML。...
rtalabel.org XSS vulnerability
Vulnerable URL: http://www.rtalabel.org/index.php Details: Description| Value ---|--- Patched:| Yes, at 28.10.2015 Latest check for patch:| 28.10.2015 19:56 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 84218 Google Pagerank| 6 VIP website status:| No Check...
ZeusCart 4 index.php search 跨站脚本漏洞
ZeusCart是一个电子商务购物车应用。ZeusCart处理search变量存在跨站脚本漏洞，远程攻击者可以利用漏洞构建恶意URI，诱使用户解析，可获得敏感Cookie，劫持会话或在客户端上进行恶意操作。影响系统：ZeusCart 4发布时间:2015-03-10CVE ID:CVE-2015-2182CNCVE ID：CNCVE-20152182 ----------------------------------本地搭建环境测试POC截图：ZeusCart 4.1测试环境...
ZeusCart 4 index.php brand&schltr 跨站脚本漏洞
ZeusCart是一个电子商务购物车应用。 ZeusCart处理 brand 和 schltr 参数存在跨站脚本漏洞，远程攻击者可以利用漏洞构建恶意URI，诱使用户解析，可获得敏感Cookie，劫持会话或在客户端上进行恶意操作。 影响系统：ZeusCart 4 CVE ID:CVE-2015-2182 CNCVE ID：CNCVE-20152182 漏洞发布时间:2015-03-10 自行搭建环境进行POC测试：ZeusCart 4.1...
OpenSNS_v1.7.1_index.php_sql注入
No description provided by source...
Espcms v5.0 /index.php SQL注入漏洞
构造www.xxx.cc/index.php?ac=search&at=taglist&tagkey=%2527,tags orselect 1 fromselect count,concatselect select concat0x7e,0x27,tablename,0x27,0x7e from informationschema.tables where tableschema=database limit 0,1,floorrand02x from informationschema.tables group by xa%23...
Nibbleblog 'index.php'存在多个跨站脚本漏洞
No description provided by source...
GeniXCMS 0.0.1 /index.php CSRF漏洞
No description provided by source...
genixcms 0.0.1 /index.php SQL注入漏洞
No description provided by source...
CVE-2015-2989
Cross-site scripting XSS vulnerability in index.php in LEMON-S PHP Twit BBS allows remote attackers to inject arbitrary web script or HTML via the imagetitle parameter...
CVE-2015-2989
Cross-site scripting XSS vulnerability in index.php in LEMON-S PHP Twit BBS allows remote attackers to inject arbitrary web script or HTML via the imagetitle parameter...
CVE-2015-2989
CVE-2015-2989 (LEMON-S PHP Twit BBS) is a cross-site scripting (XSS) vulnerability in the index.php script caused by unsafely processing the imagetitle parameter. The affected software is the Twit BBS PHP-based bulletin board. Impact as stated: remote attackers can inject arbitrary web script or ...
phpcms v9 /modules/phpsso/index.php SQL注入漏洞
No description provided by source...
CVE-2015-6809
Multiple cross-site scripting XSS vulnerabilities in BEdita before 3.6.0 allow remote attackers to inject arbitrary web script or HTML via the 1 cfgprojectName parameter to index.php/admin/saveConfig, the 2 datastatsproviderurl parameter to index.php/areas/saveArea, or the 3 datadescription...
BizIdea Design CMS 2015Q3 SQL Injection Vulnerability
BizIdea Design CMS 2015Q3 suffers from a remote SQL injection vulnerability. Document Title: =============== bizidea Design CMS 2015Q3 - SQL Injection Vulnerability Product & Service Introduction: =============================== http://www.bizidea.co.th Technical Details & Description:...