Web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc...

Wind news site management system any changes to password vulnerabilities-vulnerability warning-the black bar safety net

FoosunCMS is a powerful feature of based on ASP+ACCESS/MSSQL architecture of content management software. Vulnerability analysis: In the file\User\ GetPassword. asp: ElseIf Request. Form"Action" = "step3" then //first 2 Line 8 Call step3 ...... Sub step3 //the 1 9 8 row Dim ppassnew,pconfimpassne...

风讯（FooSun）GetPassword.asp页面存在任意修改密码漏洞

FoosunCMS是一款具有强大的功能的基于ASP+ACCESS/MSSQL构架的内容管理软件。 在文件\User\ GetPassword.asp中： ElseIf Request.Form"Action" = "step3" then //第28行 Call step3 …… Sub step3 //第198行 Dim ppassnew,pconfimpassnew ppassnew = md5Request.Form"passnew",16 …… UserConn.execute"Update FSMEUsers set UserPassword ='"&...

Web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc...

Yxbbs Forum system Ver 3.1.0 multiple vulnerabilities-vulnerability warning-the black bar safety net

Yxbbs by the Y network developed a set of open source free Community Forum system program, using asp+Access SQL technical. Speed: the use of currently the more popular caching technology, which greatly accelerates the forum access speed Function: although the function can not be and dynamic netwo...

Wind news site management system Corp_card_Unpass. asp and favorite. asp page there is unauthorized vulnerability-vulnerability warning-the black bar safety net

FoosunCMS is a powerful feature of based on ASP+ACCESS/MSSQL architecture of content management software. Vulnerability analysis: In the file\User\ CorpcardUnpass. asp: If Request. Form"Action" = "Save" then //Section 1 4-row Dim DelID,StrTmp,StrTmp1 DelID = request. Form"CorpCardID" if DelID = "...

Web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc...

风讯(FooSun) favorite.asp页面存在越权漏洞

FoosunCMS是一款具有强大的功能的基于ASP+ACCESS/MSSQL构架的内容管理软件。 在文件\User\ favorite.asp中： if request"Action"="del" then //第10行 if Request"id"="" then strShowErr = "li错误的参数！/li" Response.Redirect"lib/error.asp?ErrCodes="&Server.URLEncodestrShowErr&"&ErrorUrl=" Response.end else UserConn.execute"Delete from...

ShopXp CMS upload vulnerability get Webshell-vulnerability warning-the black bar safety net

First, you must know the Administrator's directory, because upload only the background. In upLoadbm. asp file, the first did not Check a visitor's identity. So you can directly access The code is as follows: % uppath=request"a"&"/" 'file upload path filelx=request"b" 'file upload type 1-jpg...

portfolio_company script asp SQL Injection Vulnerability

Exploit for php platform in category web applications ======================================================== portfoliocompany script asp SQL Injection Vulnerability ======================================================== Author: zee eichel Home: tecon-crewdotorg Version: ASP.NET Tested on: Lin...

Web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc...

Lois Software 2.0a SQL Injection

Vulnerability ID: HTB22430 Reference: http://www.htbridge.ch/advisory/sqlinjectionvulnerabilityinwebdb1.html Product: WebDB Vendor: Lois Software Vulnerable Version: 2.0a and Probably Prior Versions Vendor Notification: 10 June 2010 Vulnerability Type: SQL Injection Status: Fixed by Vendor Risk...

Web Wiz Forums (Database) Vulnerability

Exploit for php platform in category web applications ======================================= Web Wiz Forums Database Vulnerability ======================================= 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/...

Web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc...

Alpin CMS - e4700.asp?id SQL Injection

Alpin CMS - e4700.asp?id SQL Injection Alpin CMS e4700.asp SQL Injection Vulnerability Author : CoBRa21 Script Home : http://www.alpin-cms-demo1.com/ http://www.alpin-cms.com/ Dork : null SQL Injection: http://localhost/path/e4700.asp?id=-1705492526 SQL SEHiTLERiMiZE ALLAH'TAN RAHMET , AiLELERiNE...

Alpin CMS - 'e4700.asp?id' SQL Injection

Alpin CMS e4700.asp SQL Injection Vulnerability Author : CoBRa21 Script Home : http://www.alpin-cms-demo1.com/ http://www.alpin-cms.com/ Dork : null SQL Injection: http://localhost/path/e4700.asp?id=-1705492526 SQL SEHiTLERiMiZE ALLAH'TAN RAHMET , AiLELERiNE SABIR ve SELAMETLER DiLERiM...

Web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc...

Wind news site management system API_Response. asp page there is unauthorized vulnerability-vulnerability warning-the black bar safety net

FoosunCMS is a powerful feature of based on ASP+ACCESS/MSSQL architecture of content management software. In the file\API\ APIResponse. asp: If Request. QueryString"" Then //paragraph 1 Line 6 SaveUserCookie Else Set XmlDoc = Server. CreateObject"msxml2. FreeThreadedDOMDocument" & amp; MsxmlVersi...

ShopWind online shop system upload vulnerability-vulnerability warning-the black bar safety net

ShopWind online shop system based on Make on the market the best online shop System,Long-term to provide customers with quality the online systems services,as network operators to create the greatest value! Why do we call Shopwind,we hope that our online shop system running like the wind as...

Web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc...