WordPress未授权帖子访问漏洞

WordPress是一款流行的博客程序。 WordPress不正确过滤用户提交的URI数据，远程攻击者可以利用漏洞未授权读取之前发布的帖子。 问题是Wordpress信任$SERVER'REQUESTURI'全局变量，操作$SERVER'REQUESTURI'可导致多个跨站缺陷，虽然攻击者不能控制所有$SERVER变量，但也不能信任所有变量。 如： htttp://localhost/wordpress/'wp-admin/ 会导致$SERVER'REQUESTURI'和$SERVER'PHPSELF'包含如下值： htttp://localhost/wordpress/'wp-admi...

WordPress $_SERVER变量跨站脚本漏洞

BUGTRAQ ID: 26885 WordPress是一款免费的论坛Blog系统。 WordPress处理全局变量时存在漏洞，远程攻击者可能利用此漏洞控制导致跨站脚本执行攻击。 WordPress信任了$SERVER'REQUESTURI'全局变量，因此远程攻击者控制了$SERVER'REQUESTURI'就可以执行跨站脚本攻击。以下是/wp-includes/query.php文件中第34行的有漏洞函数： function isadmin global $wpquery; return $wpquery-isadmin || stripos$SERVER'REQUESTURI',...

WordPress Core 2.3.1 - Unauthorized Post Access

source: https://www.securityfocus.com/bid/26885/info WordPress is prone to a vulnerability that lets unauthorized users read draft posts before they have been published. This issue affects WordPress 2.3.1; other versions may also be affected. NOTE: This BID is being reinstated because further...

CVE-2007-6318

CVE-2007-6318 is a SQL injection vulnerability in WordPress, affecting wp-includes/query.php in WordPress 2.3.1 and earlier. The issue allows remote attackers to alter the database via the s parameter when DB_CHARSET is set to encodings that support a backslash in multibyte characters (e.g., Big5...

Sun OpenOffice.org < 2.3.1 Database HSQLDB Database Document Handling Arbitrary Java Code Execution

The remote host is running a version of Sun Microsystems OpenOffice.org that contains an arbitrary code execution vulnerability in its HSQLDB database engine. If a remote attacker can trick a user into opening a specially crafted database, this issue can be leveraged to execute arbitrary static...

Sql injection

SQL injection vulnerability in articles.php in JPortal 2.3.1 and earlier allows remote attackers to execute arbitrary SQL commands via the topic parameter...

CVE-2007-5973

SQL injection vulnerability in articles.php in JPortal 2.3.1 and earlier allows remote attackers to execute arbitrary SQL commands via the topic parameter...

CVE-2007-5973

SQL injection vulnerability in articles.php in JPortal 2.3.1 and earlier allows remote attackers to execute arbitrary SQL commands via the topic parameter...

jPORTAL &lt;= 2.3.1 articles.php Remote SQL Injection Vulnerability

No description provided by source. Title:jPORTAL = 2.3.1 and Remote SQL Injection Vulnerability Dork: intext:"jPORTAL 2" & inurl:"articles.php?topic=" Autor: Alexsize E-Mail: [email protected] Site: Antichat.ru articles.php?topic=-3+union+select+1,pass,3,4,5+from+admins/ Vuln code: function...

jPORTAL <= 2.3.1 articles.php Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ================================================================ jPORTAL '.$r'title'.''; 0day.today 2018-01-10...

[waraxe-2007-SA#059] - XSS in WordPress 2.3

waraxe-2007-SA059 - XSS in WordPress 2.3 ==================================================================== Author: Janek Vind "waraxe" Date: 27. October 2007 Location: Estonia, Tartu Web: http://www.waraxe.us/advisory-59.html Target software description: WordPress is a state-of-the-art semanti...

CVE-2001-1585

CVE-2001-1585: OpenSSH 2.3.1 development snapshot (2001-01-18 to 2001-02-08) exposes a flaw in SSH protocol 2 public key authentication: it does not perform a challenge–response step to verify the client’s private key, allowing remote attackers to bypass authentication by using a public key from ...

CVE-2007-4914

Unspecified vulnerability in the subscriptions manager in Invision Power Board IPB or IP.Board 2.3.1 before 20070912 allows remote authenticated users to change the member ID and reduce the privilege level of arbitrary users via a crafted payment form, related to 1 classgw2checkout.php, 2...

Woltlab Burning Board UserGroups.PHP SQL注入漏洞

Woltlab Burning Board是一款基于PHP的WEB应用程序。 Woltlab Burning Board不正确过滤用户提交的输入，远程攻击者可以利用漏洞进行SQL注入攻击，可获得敏感信息。 问题是'UserGroups.PHP'脚本对用户提交的WEB参数缺少过滤，提交恶意SQL代码作为参数数据，可导致更改原来的SQL逻辑，获得敏感信息。 Woltlab Burning Board 2.7 Woltlab Burning Board 2.6 Woltlab Burning Board 2.5 Woltlab Burning Board 2.4 Woltlab Burning...

CVE-2007-0912

Cross-Site Request Forgery CSRF vulnerability in admin/admin.adm.php in Jportal 2.3.1, and possibly earlier, allows remote attackers to perform privileged actions as administrators by tricking the admin into accessing a URL with modified arguments to admin/admin.adm.php...

CVE-2007-0912

Jportal 2.3.1 (and possibly earlier) contains a Cross-Site Request Forgery (CSRF) vulnerability in admin/admin.adm.php that allows remote attackers to perform privileged actions as administrators by enticing an admin to access a modified URL. Affected component: admin.adm.php within Jportal 2.3.1...

Jportal 2.3.1 CSRF vulnerability

Type: CSRF Attack / Input Validation Error Remote: Yes Version: 2.3.1 very possible, that older versions are vulnerable too Problem is in admin/admin.adm.php: function addadmin global $name, $mail, $nick, $action, $usertbl, $access; global $nick, $PHPSELF, $pass, $pass, $acce, $op, $goto;...

CVE-2006-6629

The CVE-2006-6629 issue affects WeBWorK PG Language prior to version 2.3.1. It concerns lib/WeBWorK/PG/Translator.pm, where an insufficiently restrictive regular expression to validate macro filenames allows loading of arbitrary macro files whose names contain the strings dangerousMacros.pl, PG.p...

CVE-2006-5804

CVE-2006-5804 is a PHP remote file inclusion vulnerability in Advanced Guestbook 2.3.1 (admin.php) that allows an attacker to execute arbitrary PHP code via a URL supplied to the include_path parameter. The PT-2006-6481 entry for the same product version 2.3.1 corroborates this vector, detailing ...

PT-2006-6481 · Unknown · Advanced Guestbook

Name of the Vulnerable Software and Affected Versions: Advanced Guestbook version 2.3.1 Description: The issue allows remote attackers to execute arbitrary PHP code via a URL in the include path parameter in the admin.php file. Recommendations: For Advanced Guestbook version 2.3.1, consider...