Weak Password Vulnerability in Backend Management System of Suzhou Longye Network Technology Co.

Suzhou Longye Network Technology Co., Ltd. is a network company. It is mainly engaged in website project planning, webpage production, web-based database development and website maintenance. A weak password vulnerability exists in the backend management system of Suzhou Longye Network Technology...

SQL injection vulnerability in the background management system of the small program of Five Grams Mall

Five grams of mall small program background management system is a PHP development with background WeChat mall small program source code. Five grams mall applet background management system SQL injection vulnerability, the vulnerability is due to the system fails to user-submitted data for...

SQL Injection Vulnerability in Background Management System of Zhongyi Design Studio

Zhongyi Design Studio Backend Management System is a website building system. The loginName parameter of the CEE Design Studio backend management system has a SQL injection vulnerability parameter that allows attackers to exploit the vulnerability to obtain sensitive information from the database...

ThinkSNS v3 /apps/page/Lib/Action/DiyAction.class.php 任意用户登陆+后台管理绕过

No description provided by source...

KesionCMS V9.5一处xss无限制盲打后台管理

简要描述： 呵呵 详细说明： 首先说明一下，测试的这个站是百度关键词来的 关键词：版本号：KesionCMS V9.5 因为电脑问题，本地搭建不了环境，搜索到这个网站，默认密码登录后台 所以就拿这个网站测试了！对不起了，站长！ 测试站点 http://www.bjlqzx.com/ 首先要注册一个会员（这个默认注册是不需要审核的，所以说是无限制盲打后台管理） 进入会员中心-投诉建议+发布 在投诉标题插入xss代码 投诉之后会返回我的投诉，然后弹窗了 用google浏览器进入后台查看投诉-弹窗 查看下源码入库了，是投诉标题没过滤好！ 漏洞证明： 详细说明...

yxcms最新版一处无限制xss盲打后台管理

简要描述： 呵呵 详细说明： 在a5源码下载的最新版的，是5.28更新的，还是存在xss漏洞 这个应该不算是重复ID了吧，都时隔几个月了，而且是最新版0...... 在留言板插入代码如下图 后台弹窗 漏洞证明： 详细说明...

Simple article management system cookie injection vulnerabilities pass to kill all versions-bug warning-the black bar safety net

Simple article management system uses a classification, the interface simple, feature simple and practical. Delete the article, article related images also be deleted minus Less junk files exist. The backstage management entrance http://Domain/admin username and password are admin Backend module:...

Joomla Component com_jesectionfinder Upload Vulnerability

Exploit for php platform in category web applications ======================================================== Joomla JE Property Finder Component Upload Vulnerability ========================================================...

oblog4.6添加后台管理员漏洞

oblog4.6在处理相关数据时存在漏洞 造成可以添加后台管理员。 oblog4.6 sql版 http://www.oblog.cn/ 1、注册一个用户，用户名script，密码123456 2、发布一篇日志，日志标题：测试一下 3、个人前台首页找到日志"测试一下"，点"推荐" 4、个人后台管理，选择"常用"选项中的"推荐日志"，然后点"测试一下"日志后面的修改，把摘要内容修改成： s'//WHERE/ /logid=1;insert//into//oblogadmin//username,pa...