ecshop绕过验证码暴利破解3

简要描述： 不用给分了，都不好意思要了（确实不是故意的，刚发现） rt 第一次的漏洞利用程序有个bug 但是因为有这个bug 导致了成功利用了发现的第三处漏洞 第二次漏洞也是并没有用到第二次所提到的漏洞，其实是本次的 好吧，有些绕口 简单了说就是 若本漏洞修复了，可以利用漏洞2 漏洞2修复了可以利用漏洞1 漏洞1影响范围更大一些 ------------------------------- 传送门 第一次http://wooyun.org/bugs/wooyun-2013-025053 第二次http://wooyun.org/bugs/wooyun-2013-025065 详细说明：...

ecshop设计缺陷.会员账号可暴力破解

简要描述： 乌云上面很多都是爆破验证码..怎么没人发爆破账号密码的... 详细说明： 在www.ecshop.cn 做的测试 登陆口连个简单的验证码都没有设置...一些网站的管理后台也有没验证码.这样就可以爆破了.先拿会员账号做个测试... 漏洞证明： img src="https://images.seebug.org/upload/201305/3009142831689f1beb4c45937af23a32a3389e7a.jpg" alt="1.jpg" widt...

WordPress Securimage 3.2.4 Cross Site Scripting Vulnerability

WordPress Securimage plugin version 3.2.4 suffers from a cross site scripting vulnerability. Wordpress Securimage-WP Plugin v3.2.4 URI-based XSS Vulnerability Vendor: Securimage PHP CAPTCHA Product web page: https://wordpress.org/extend/plugins/securimage-wp/ Affected version: 3.2.4 Summary:...

CVE-2013-3535

Multiple cross-site scripting XSS vulnerabilities in CMSLogik 1.2.0 and 1.2.1 allow remote attackers to inject arbitrary web script or HTML via the 1 adminemail, 2 headertitle, 3 sitetitle parameter to admin/settings; 4 recaptchaprivate or 5 recaptchapublic parameter to admin/captchasettings; 6...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in CMSLogik 1.2.0 and 1.2.1 allow remote attackers to inject arbitrary web script or HTML via the 1 adminemail, 2 headertitle, 3 sitetitle parameter to admin/settings; 4 recaptchaprivate or 5 recaptchapublic parameter to admin/captchasettings; 6...

Wordpress Securimage-WP Plugin v3.2.4 URI-based XSS Vulnerability

Summary Securimage-WP adds powerful CAPTCHA protection to comment forms on posts and pages to help prevent comment spam from getting onto your site. Description Securimage-WP suffers from a XSS issue in 'siwptest.php' that uses the 'PHPSELF' variable. The vulnerability is present because there...

WordPress Securimage 3.2.4 Cross Site Scripting

Wordpress Securimage-WP Plugin v3.2.4 URI-based XSS Vulnerability Vendor: Securimage PHP CAPTCHA Product web page: https://wordpress.org/extend/plugins/securimage-wp/ Affected version: 3.2.4 Summary: Securimage-WP adds powerful CAPTCHA protection to comment forms on posts and pages to help preven...

Securimage 3.5 URI-based Cross-Site Scripting Vulnerability

Summary Securimage is an open-source free PHP CAPTCHA script for generating complex images and CAPTCHA codes to protect forms from spam and abuse. Description Securimage suffers from a XSS issue in 'exampleform.php' that uses the 'REQUESTURI' variable. The vulnerability is present because there...

Securimage 3.5 Cross Site Scripting

Securimage 3.5 URI-based Cross-Site Scripting Vulnerability Vendor: Securimage PHP CAPTCHA Product web page: http://www.phpcaptcha.org Affected version: 3.5 Summary: Securimage is an open-source free PHP CAPTCHA script for generating complex images and CAPTCHA codes to protect forms from spam and...

Discuz点触验证码插件验证绕过+密码明文传输

简要描述： 部分DZ论坛启用点触验证码后验证码完全没有起作用。同时由于更改了登录逻辑，还会造成论坛登录密码明文传输。 详细说明： 由于点触验证码插件的验证逻辑有问题，启用验证码之后可以简单绕过。同时由于更改了登录逻辑，会将DZ原本的md5传输的密文变成明文传输。 漏洞证明： 将红框中的display: none; 去掉，然后可以看到多了一个登录按钮。 这个按钮是没有启用验证逻辑的。直接输入用户名密码就可以登录。同时这样登录的话POST提交的是正常的md5加密后的密码。 但是如果输入验证码提交的话，POST数据就变成了： 其中可以看到明文的密码字段。...

WordPress IndiaNIC FAQs Manager Plugin 1.0 - Multiple Vulnerabilities

IndiaNIC FAQs Manager Plugin is prone to a CSRF and XSS vulnerabilities, also, the Captcha value can be read from captcha parameter hidden field. Solution Update the plugin...

WordPress Plugin IndiaNIC FAQs Manager 1.0 - Multiple Vulnerabilities

alert1 in question parameter. The Captcha value can be read from captcha parameter hidden field Part of Ask Question form =================== We don't need the captcha Image when we have this xD Request from Ask Question area XSS in question parameter POST /wordpress/wp-admin/admin-ajax.php...

Bo library network to any user of the password reset vulnerability, non-violent crack-vulnerability warning-the black bar safety net

Brief description: Bo library network-the most varieties of Chinese online bookstore, and the presence of any user of the password reset vulnerability, or non-mainstream. Don't burp suite, no violence, just gently change you can reset any user password. To predict the details, please see the...

MyBB < 1.6.9 Multiple Vulnerabilities

According to its version number, the MyBB install hosted on the remote web server is affected by multiple vulnerabilities : - A brute-force weakness exists in the CAPTCHA system due to an unspecified flaw. - A SQL injection vulnerability due to improper sanitization user-supplied input to the...

Bug Hunter Finds 'Blended Threat' Targeting Yahoo Web Site

A Romanian bug hunter has discovered a “blended threat” targeting Yahoo’s Developer Network Web site that allows unauthorized access to Yahoo users’ emails and private profile data. At a security conference Sunday, Sergiu Dragos Bogdan demonstrated an abbreviated version of an attack using the YQ...

X-Ray 2.0 - VirusTotal frontent version for Suspicious Files Auto Submit

Raymond announce X-Ray 2.0, a program which is frontend for VirusTotal multi scanner. X-Ray will provide users with automatic submission of files that you think are suspicious to 35 Agnitum, Antiy Labs, Avast, AVG, Avira, Bitdefender, QuickHeal, ClamAV, Comodo, Dr.Web, Emsisoft, ESET, F-Prot,...

SA-CONTRIB-2012-135 - CAPTCHA - Insufficient anti-automation prevention

This module enables you to protect website forms using a CAPTCHA. A CAPTCHA is a test which attempts to differentiate between a human and an automated bot or script. The module doesn't ensure that test submissions have a single-use unique token. This means that web robots could reuse a single...

Swoopo Gold Shop CMS 8.4.56 - Multiple Web Vulnerabilities

Swoopo Gold Shop CMS 8.4.56 - Multiple Web Vulnerabilities Title: ====== Swoopo Gold Shop CMS v8.4.56 - Multiple Web Vulnerabilities Date: ===== 2012-05-14 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=515 VL-ID: ===== 515 Common Vulnerability Scoring System:...

CVE-2012-2435

Directory traversal vulnerability in the captcha module in Pligg CMS before 1.2.2 allows remote authenticated users to include and execute arbitrary local files via a .. dot dot in the captcha parameter to module.php, as demonstrated by cross-site request forgery CSRF attacks...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Pligg CMS before 1.2.2 allow remote attackers to inject arbitrary web script or HTML via 1 an arbitrary parameter in a move or 2 minimize action to admin/adminindex.php; 3 the karmausername parameter to module.php in the karma module; 4 q1low, ...