Sefrengo CMS 1.6.0 - SQL Injection

Advisory: SQL-Injection in administrative Backend of Sefrengo CMS v.1.6.0 Advisory ID: SROEADV-2015-04 Author: Steffen Rösemann Affected Software: CMS Sefrengo v.1.6.0 Release-Date: 18th-Feb-2014 Vendor URL: http://www.sefrengo.org/start/start.html Vendor Status: fixed CVE-ID: -...

Shopnc Software Backend Arbitrary Code Execution Vulnerability

ShopNC mall system is a set of multi-store mode mall system developed by Tianjin Netcity Tianchuang Technology Co. There is an arbitrary code execution vulnerability in the backend of shopnc software, due to the operation process did not check whether the content of the field of the advertising...

PayPal Inc BB #74 - Persistent Core Backend Vulnerability

Document Title: =============== PayPal Inc BB 74 - Persistent Core Backend Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1278 PayPal Inc Security UID: cDc49dT Vulnerability Magazine Article:...

Ecshop后台getshell-2

简要描述： 非模板，非sql!!!!!!! 详细说明： 后台可以编辑语言项，并且语言项中有部分是双引号，所以可以通过 $phpinfo 这种格式直接执行php代码，getshell!!这里为了方便演示，使用phpinfo，实际情况可以换成一句话） 语言文件有双引号 后台可以编辑语言文件，插入特殊格式php代码。 此处编辑的是“gzip已禁用”这段文字，所以几乎所有页面都有php代码，首页都有了。 漏洞证明：...

Espcms V5.6.13.04.22 UTF8 正式版后台逻辑验证错误漏洞之2/N

简要描述： 系统后台权限逻辑校验存在问题，导致后台某模块功能被绕过和非授权访问 详细说明： 后台管理员权限校验在文件\public\classconnector.php: function adminpurview if $this-fun-accept'archive', 'R' == 'filemanage' && $this-fun-accept'action', 'R' == 'batupfilesave' $ecispadmininfo = $this-fun-accept'ecispadmininfo', 'G'; $esppowerlist =...

The integrity of the enterprise 2. 0 backend login universal password vulnerability-vulnerability warning-the black bar safety net

Background/ ManageAdmin/ManageLogin. asp The vulnerability can be used universal password login 'or'='or' 'or'='or' Get a webshell directly on in the picture there, you know. Google keywords: inurl:/Product/Product. asp? CateID Actual URL: http://www.hnvalve.com/ManageAdmin/AdminManage.asp...

PHP168后台查看/修改任意文件漏洞

No description provided by source...

CVE-2009-2161

CVE-2009-2161 affects TorrentTrader Classic 1.09. The vulnerability is a directory traversal in backend/admin-functions.php that, on case-insensitive sites, allows remote attackers to include and execute arbitrary local files via a .. in the ss_uri parameter when combined with a modified componen...

Fedora 8 : duplicity-0.4.9-1.fc8 (2008-1521)

WARNING: Command line syntax incompatibility! See e.g. https://www.redhat.com/archives/epel-devel-list/2008-February/msg00056 .html for furhter information. - Upgrade to 0.4.9 - Duplicity discloses password in FTP backend CVE-2007-5201 - Several bug and problem fixes Note that Tenable Network...

IlohaMail Forged GET/POST Arbitrary Contacts Deletion

The target is running at least one instance of IlohaMail version 0.7.9-RC2 or earlier. Such versions contain a flaw that enables an authenticated user to delete contacts belonging to any user provided the DB-based backend is used to store contacts. The flaw arises because ownership of 'deleteitem...