IMPress Listings <= 2.0.1 - Unauthenticated Reflected Cross-Site Scripting (XSS)

The IMPress Listings WordPress plugin was affected by an Unauthenticated Reflected Cross-Site Scripting XSS security vulnerability. IMPress Listings XSS Demo alertdocument.cookie;...

PHPOK官方DEMO配置不当可getshell(影响其他站点)

简要描述： 这.... 详细说明： Demo未配置好权限，可直接拿shell 首先登陆demo站后台 http://demo.phpok.com/admin.php 进入风格管理 更改模板格式为php 然后直接创建一个index.php内容为一句话即可。 从配置文件可以看出绑定了多个网站，其中有些是正在运行的 如yuechi.net ，岳池在线。 还有update.phpok.com,估计是用来更新的。 mask 区域 alHos n 8 Host Host admin@p ot /qg Name 1000 ;/qghost/w eny,a fro...

hishop最新版存在SQL注入

简要描述： hishop最新版存在SQL注入（demo演示） 详细说明： hishop最新版存在SQL注入（demo演示） http://www.hishop.com.cn/products/ydfx/ 这里是demo： 随意注册一个，登录，访问POC： http://ydfx.demo.shopefx.com/user/UserRefundApply.aspx?OrderId=%27%20and%20select%20@@version%3E0%20and%20%271%27=%271 漏洞证明：...

ATOMYMAXSITE 2.5 SQL Injection

Exploit Title : ATOMYMAXSITE 2.5 SQL Injection Vulnerability Exploit Author : Persian Hack Team Vendor Homepage : http://www.ibizz.nl/ Google Dork : "Power by : ATOMYMAXSITE 2.5" OR Powered by ATOMYMAXSITE 2.5 Date: 2015/12/24 Version : 2.5 Demo:...

ATOMYMAXSITE 2.5 Cross Site Scripting

Exploit Title : ATOMYMAXSITE CMS Cross Site Scripting Exploit Author : Persian Hack Team Vendor Homepage : http://maxtom.sytes.net/ Google Dork : "Power by : ATOMYMAXSITE 2.5" OR Powered by ATOMYMAXSITE 2.5 Date: 2015/12/23 Version = 2.5 Payload : "PersianHack Team Demo:...

gnCMS Remote PHP Code Execution Vulnerability

Exploit for php platform in category web applications Exploit Title : gnCMS Remote PHP Code Execution Exploit Author : Persian Hack Team Vendor Homepage : www.groupnet.gr Google Dork : "powered by gnCMS" Version : 1.0.1 Date: 2015/12/19 PoC: Vulnerable Paramter module= Demo:...

Ovidentia 8.3.0 Remote File Inclusion / SQL injection Vulnerabilities

Exploit for php platform in category web applications Title: Ovidentia 8.3.0 Remote File Inclusion / SQL injection Vulnerabilities Author: GoLdM Download: http://www.ovidentia.org/index.php?tg=fileman&sAction=getFile&id=17&gr=Y&path=Downloads%2FDistributions&file=ovidentia-8-3-0.zip&idf=886 Remot...

ThaiWebPlus CMS Cross Site Scripting Vulnerability

Exploit for php platform in category web applications Exploit Title : ThaiWebPlus CMS Cross Site Scripting Vulnerability Exploit Author : Persian Hack Team Vendor Homepage : http://thaiwebplus.com Google Dork : Powered by ThaiWebPlus inurl:idrun= Date : 2015/12/12 Version : 1.0 1-1:Admin Page msg...

ASP Dynamika 2.5 Cross Site Scripting

Exploit Title : ASP Dynamika 2.5 Cross Site Scripting Vulnerability Exploit Author : Persian Hack Team Vendor Homepage : http://www.dynamika.co.il/ Google Dork : "Powered By : Dynamika" Date : 2015/12/08 Version : 2.5 Vulnerable Paramter siteid= Bypass '"--alert0xa Demo:...

CVE-2015-7348

Cross-site scripting XSS vulnerability in zTree 3.5.19.1 and possibly earlier allows remote attackers to inject arbitrary web script or HTML via the id parameter to demo/en/asyncData/getNodesForBigData.php...

Property Castle 15 Cross Site Scripting

Exploit Title : Property Castle XSS Vulnerability Exploit Author : Persian Hack Team Vendor Homepage : http://www.propertycastle.com/ Google Dork : intext:"Powered By Property Castle " inurl:linkid= OR inurl:"/cms/cms.php?linkid=" Date : 2015/12/06 Version : PC15 Vulnerable Paramter linkid= Bypas...

金蝶K3财务软件系统任意文件上传demo测试成功

简要描述： 最近公司也买了这系统，对系统测试了下发现存在漏洞，官网demo同样存在这漏洞。 财务系统如果对外了被拿权限了确实很麻烦。 详细说明： 漏洞地址 http://.../k3cloud/ 漏洞代码如下 public void ProcessRequestHttpContext context try context.Response.ContentType = "text/plain"; string physicalPath = context.Request.Headers"filefolder"; if string.IsNullOrEmptyphysicalPath...

MyCustomers 1.3.873 SQL Injection

Exploit Title : MyCustomers Cms Sql Injection Vulnerability Exploit Author : Persian Hack Team Vendor Homepage : http://www.iran-php.com/ Google Dork : "Powered By IranPHP" & inurl:/index.php?DPT=IP17 & "Powered+by+MyCustomers-1.3.873" Date: 2015/11/28 Version : 1.3 Vulnerable Paramter DPT= Demo:...

POLLSolved 1.5.2 SQL Injection / Authentication Bypass

Exploit Title : POLLSolved Authentication Bypass Exploit Author : Persian Hack Team Vendor Homepage : http://www.usolved.net/ Google Dork : intitle:POLLSolved Date: 2015/11/12 Version : v1.5.2 PoC: To bypass the login page enter '=' 'or' for username and password input. Login And Add Your Poll D:...

Algolia: Stored XSS on https://www.algolia.com/realtime-search-demo/*

Description When you generate a UI demo, the values of the Attributes are not escaped when printed in the page of the demo. There is a protection by CloudFlare, but because the values of the Attributes are printed in Javascript code, I found a way to abuse this to execute Javascript code. Seems...

xpshop网店系统sql注入(demo演示)

简要描述： 详细说明： 漏洞位置:xpshop.webui.MyRefund protected void PageLoadobject sender, EventArgs e if Utils.requestbase.Request.QueryString"type" && Utils.requestbase.Request.QueryString"Action" string text = base.Request.QueryString"Action"; if text != null if !text == "GetImg" if text == "GetPackageGID"...

phpyun 任意用户密码修改两处 (秒破/demo测试)

简要描述： 好久没看过php了。。。。 如题咯。 详细说明： 来看到找回密码的地方。 app/controller/forgetpwd/index.class.php function sendaction $username=yuniconv"utf-8","gbk",$POST'username'; if!$this-CheckRegUser$username&&!$this-CheckRegEmail$username $res'msg'=yuniconv"gbk","utf-8","用户名不符合规范！"; $res'type'='8'; echo...

Avast! AntiVirus - X.509 Error Rendering Command Execution

Source: https://code.google.com/p/google-security-research/issues/detail?id=546 Avast will render the commonName of X.509 certificates into an HTMLLayout frame when your MITM proxy detects a bad signature. Unbelievably, this means CN="really?!?!?" actually works, and is pretty simple to convert...

Square Victoria O2O business system SQL injection vulnerability+XXE entity injection demo validation-vulnerability warning-the black bar safety net

Square Victoria O2O, the demo site address: http://o2odemo.fanwe.net/ /cpapi/qxtapi.php code area define"FILEPATH","/cpapi"; requireonce '../system/systeminit.php'; $ip = CLIENTIP; $xml = filegetcontents'php://input'; if$ip!=' 221.179.180.156' || $xml=="" header"Content-Type:text/html;...

PHP cgimode fpm writeprocmemfile bypass disable function demo Vulnerability

Exploit for php platform in category web applications ?php errorreporting0x66778899; settimelimit0x41424344; define'ZENDINIUSER', 10; define'ZENDINIPERDIR', 11; define'ZENDINISYSTEM', 12; / 00df9000-00e16000 rw-p 00000000 00:00 0 017ff000-01a51000 rw-p 00000000 00:00 0 heap...