Sql injection

SQL injection vulnerability in feedbackjs.php in DedeCMS 5.1 allows remote attackers to execute arbitrary SQL commands via the arcurl parameter...

CVE-2009-3806

SQL injection vulnerability in feedbackjs.php in DedeCMS 5.1 allows remote attackers to execute arbitrary SQL commands via the arcurl parameter...

CVE-2009-3806

CVE-2009-3806 describes an SQL injection in DedeCMS 5.1, specifically in feedback_js.php where the arcurl parameter can be manipulated to execute arbitrary SQL commands. The issue is exploitable remotely and can impact confidentiality, integrity, and availability according to the provided metrics...

CVE-2009-3806

SQL injection vulnerability in feedbackjs.php in DedeCMS 5.1 allows remote attackers to execute arbitrary SQL commands via the arcurl parameter...

CVE-2009-3806: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in feedbackjs.php in DedeCMS 5.1 allows remote attackers to execute arbitrary SQL commands via the arcurl parameter...

织梦(Dedecms)select_soft_post.php页面变量未初始漏洞

漏洞产生文件位于include\dialog\selectsoftpost.php，其变量$cfgbasedir没有正确初始化，导致可以饶过身份认证和系统变量初始化文件，导致可以上传任意文件到指定目录。其漏洞利用前提是registerglobals=on,可以通过自定义表单为相关的变量赋值。 Dedecms 5.5 暂无 请关注官方补丁 html head titleDedecms v55 RCE Exploit Codz By flyh4t/title /head body style="FONT-SIZE: 9pt" ---------- Dedecms v55 RCE Exploi...

Dedecms select_soft_post. php page the variables are not the initial vulnerability-vulnerability warning-the black bar safety net

Text/ Flyh4t Affected versions: Dedecms 5.5 漏洞 产生 文件 位于 include\dialog\selectsoftpost.php, which is the variable$cfgbasedir not initialized properly, can lead to spare Through the identity authentication and system variable initialization file, cause you can upload any file to the specified...

织梦(DEDECMS) 5.1 plus/feedback_js.php存在注入漏洞

在magicquotesgpc=off的情况下可用 此漏洞可拿到后台管理员的帐号和加密HASH,漏洞存在文件plus/feedbackjs.php,未过滤参数为$arcurl ...... $urlindex = 0; ifempty$arcID $row = $dlist-dsql-GetOne"Select id From @cachefeedbackurl where url='$arcurl' "; //此处$arcurl没有过滤 ifisarray$row $urlindex = $row'id';...

DedeCMS <= 5.1 SQL Injection

Exploit for unknown platform in category web applications ============================ DedeCMS dsql-GetOne"Select id From @cachefeedbackurl where url='$arcurl' "; ifisarray$row $urlindex = $row'id'; ifempty$arcID && empty$urlindex exit; ...... ifempty$arcID $wq = " urlindex = '$urlindex' "; else...

DeDeCMS 5.1 - SQL Injection

Securitylab.ir Application Info: Name: DEDECMS Version: 5.1 Discoverd By: Securitylab.ir Website: http://securitylab.ir Contacts: adminatsecuritylab.ir & info@securitylabdotir Vulnerability Info: Type: Sql Injection Vulnerability Risk: Medium...

DeDeCMS 5.1 - SQL Injection

DeDeCMS 5.1 - SQL Injection Securitylab.ir Application Info: Name: DEDECMS Version: 5.1 Discoverd By: Securitylab.ir Website: http://securitylab.ir Contacts: adminatsecuritylab.ir & info@securitylabdotir Vulnerability Info: Type: Sql Injection Vulnerability Risk: Medium...

DedeCMS 5.1 SQL Injection

No description provided by source. Securitylab.ir Application Info: Name: DEDECMS Version: 5.1 Discoverd By: Securitylab.ir Website: http://securitylab.ir Contacts: adminatsecuritylab.ir & info@securitylabdotir Vulnerability Info: Type: Sql Injection Vulnerability Risk: Medium...

DedeCMS 5.1 SQL Injection

Securitylab.ir Application Info: Name: DEDECMS Version: 5.1 Discoverd By: Securitylab.ir Website: http://securitylab.ir Contacts: adminatsecuritylab.ir & info@securitylabdotir Vulnerability Info: Type: Sql Injection Vulnerability Risk: Medium...

DEDECMS v5.1 Sql Injection Vulnerability

Securitylab.ir Application Info: Name: DEDECMS Version: 5.1 Discoverd By: Securitylab.ir Website: http://securitylab.ir Contacts: adminatsecuritylab.ir & info@securitylabdotir Vulnerability Info: Type: Sql Injection Vulnerability Risk: Medium...

DEDECMS 5.1 feedback_js.php 0DAY-vulnerability warning-the black bar safety net

Author:st0p&Rainy'Fox The same is on magicquotesgpc=off case available Vulnerability version:DEDECMS 5.1 This vulnerability can get to the backend Administrator's account and the encrypted HASH,漏洞 存在 文件 plus/feedbackjs.php,not a Filter parameter for$arcurl ...... $urlindex = 0; ifempty$arcID $row...

dedecms(plus/feedback_js.php)injection vulnerability-vulnerability warning-the black bar safety net

Found by:Rainy'Fox&St0p Team:two fat network securityhttp://bbs.erpangzi.com Affected version: dedecms GBK 5.1 Vulnerability description: 文件 :plus/feedbackjs.php ifempty$arcID $row = $dlist-dsql-GetOne"Select id From @cachefeedbackurl where url='$arcurl' "; ifisarray$row $urlindex = $row'id'; Get...

DEDECMS novel series module 0DAY-vulnerability warning-the black bar safety net

Author: st0p Can be reproduced, but please indicate the source: http://www. st0p. org Since this hole appears in the DEDECMS novel series module, so as long as DEDECMS installed when selected fiction series module, then the presence of this problem, some versions in the conditions permit under ca...

织梦(dedecms)V5.5分页处理函数信息泄露漏洞

系统用intval对$pageno的值进行了处理，但是intval处理过程中，如果为非正整数时，会赋值为0，系统就会出错。 $pageno = isset$pageno && isnumeric$pageno ? max1,$pageno : 1; 没有对0进行过滤处理。 You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near '-15,15' at line 7 - Execu...

织梦(dedecms)5.3 – 5.5 plus/digg_frame.php 注入漏洞

No description provided by source...

DedeCMS V5. 3 exp-vulnerability warning-the black bar safety net

Delete the Site any file. 2. Proof absolute path The impact of the system = DedeCMS V5. 3 1. Delete any file. Registration of normal users...feel free to find a place to upload an attachment it is OK. Part of the code: Copy the code form name="form1" action="http:// 网站 地址...