CVE-2014-5269

Plack::App::File in Plack before 1.0031 removes trailing slash characters from paths, which allows remote attackers to bypass the whitelist of generated files and obtain sensitive information via a crafted path, related to Plack::Middleware::Static...

CVE-2014-5269

Plack::App::File in Plack before 1.0031 removes trailing slash characters from paths, which allows remote attackers to bypass the whitelist of generated files and obtain sensitive information via a crafted path, related to Plack::Middleware::Static...

ecmall 2. x pass to kill SQL injection vulnerability analysis and exploit-vulnerability warning-the black bar safety net

漏洞 文件 app/buyergroupbuy.app.php function exitgroup $id = empty$GET'id' ? 0 : $GET'id'; //no filter you know. if !$ id $this-showwarning'nosuchgroupbuy'; return false; // determine whether to fallback group if !$ this-ican$id, ACT //up $this-showwarning'Hacking Attempt'; return;...... function...

DEBIAN-CVE-2007-3543

Unrestricted file upload vulnerability in WordPress before 2.2.1 and WordPress MU before 1.2.3 allows remote authenticated users to upload and execute arbitrary PHP code by making a post that specifies a .php filename in the wpattachedfile metadata field; and then sending this file's content, alo...