Discuz! 'tid' Parameter Cross Site Scripting Vulnerability

Discuz! is prone to an cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the...

Discuz! 6.0 - tid Cross-Site Scripting

Discuz! 6.0 - tid Cross-Site Scripting source: https://www.securityfocus.com/bid/37982/info Discuz! is prone to an cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the...

Discuz! 6.0.0 Cross Site Scripting

Discuz! 6.0.0 Download: http://www.comsenz.com/downloads/install/discuz Vendor: www.comsenz.com Author: s4r4d0 mail: [email protected] Bug: Cross site scripting has benn found on viewthread.php file. Exploit: http://host/bbs/viewthread.php?tid=Xss Demo:...

Discuz! 6.0 - 'tid' Cross-Site Scripting

source: https://www.securityfocus.com/bid/37982/info Discuz! is prone to an cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the...

CVE-2009-4621

SQL injection vulnerability in the JiangHu Inn plugin 1.1 and earlier for Discuz! allows remote attackers to execute arbitrary SQL commands via the id parameter in a show action to forummission.php...

CVE-2009-4621

The CVE-2009-4621 entry describes an SQL injection vulnerability in the JiangHu Inn plugin version 1.1 and earlier for Discuz!. The issue arises from a vulnerable id parameter in the show action to forummission.php, enabling remote attackers to execute arbitrary SQL commands. Public references co...

CVE-2009-4621

SQL injection vulnerability in the JiangHu Inn plugin 1.1 and earlier for Discuz! allows remote attackers to execute arbitrary SQL commands via the id parameter in a show action to forummission.php...

Discuz! 7.0-7.2 & Phpwind7. 5 Background tasteless vulnerability-vulnerability warning-the black bar safety net

| Transfer from t00ls A lot of people there, spread out, and then sent to. Now the loophole if the initiative is published, is definitely“no. do not publish”, otherwise is definitely hiding unless someone else posted. DZ tasteless that need the Creator's permission, the Creator of the password is...

Hacking tip: provide the right technical study _Discuz! Administrator a copy-and-vulnerability warning-the black bar safety net

Crossday Discuz! Board Forum systemDiscuz! Forumis the one using PHP and MySQL, and other various databases to build efficient forum to resolvethe programme. As a commercial software product, Discuz! In code quality, operational efficiency, load capacity, security level, functional control and...

discuz! 7.1 and 7.2 remote code execution vulnerability exp-vulnerability warning-the black bar safety net

Excerpts from: 1 9 4 3'S BLOG Thanks WJS and the icy sun, laojun analysis, I will not say more, the use of exp then only the machine testing, and other purposes at your own risk! The first method: First register a user and then put form method="post" action=" " enctype="multipart/form-data" Post...

Discuz! 7.1 & 7.2 remote code execution vulnerability-vulnerability warning-the black bar safety net

First of all the way, vulnerability is t00ls heart of the Swarm spread out, xhming go read, and then I later read, the read-out of all code execution, 1 On 5 The Night of 1 1 o'clock, in the core group of hackers, xhming gave a poc, I gave an exp, do find the same problem. Off night 2 points more...

Discuz! 'referer'参数跨站脚本漏洞

Bugraq ID: 37562 Comsenz Discuz!是一款流行的论坛程序。 Comsenz Discuz!存在输入验证错误，远程攻击者可以利用漏洞进行跨站脚本攻击获得敏感信息。 问题是'member.php'脚本对'referer'参数缺少过滤，构建恶意脚本代码作为参数数据，并诱使用户访问恶意链接，可触发恶意脚本代码在目标用户浏览器上执行，导致敏感信息泄漏。 Comsenz Discuz! 1.0 目前没有解决方案提供： http://www.discuz.com/...

Discuz! 'name'参数SQL注入漏洞

Bugraq ID: 37556 Comsenz Discuz!是一款流行的论坛程序。 Comsenz Discuz!存在输入验证错误，远程攻击者可以利用漏洞进行SQL注入攻击，获得密码HASH等敏感信息。 问题是'misc.php'脚本对'name'参数缺少过滤，构建恶意SQL查询作为参数数据，可更改原来的SQL逻辑，获得敏感信息或操作数据库。 Comsenz Discuz! 7.x 目前没有解决方案提供： http://www.discuz.com/ !/usr/bin/perl use IO::Socket; print q Discuz Remote SQL Injection...

Discuz! 5.0.0 Cross Site Scripting

======================================================================================== | Title : Discuz! 5.0.0 Cross Site Scripting Vulnerability | Author : indoushka | email : [email protected] | Home : Souk Naamane - 04325 - Oum El Bouaghi - Algeria -00213771818860 | Total alerts found : ...

Discuz 2.0 Cross Site Scripting

======================================================================================== | Title : Discuz 2.0 Cross Site Scripting Vulnerability | Author : indoushka | email : [email protected] | Home : Souk Naamane - 04325 - Oum El Bouaghi - Algeria -00213771818860 | Total alerts found : 1 |...

Discuz! 2.0 - Multiple Cross-Site Scripting Vulnerabilities

Discuz! 2.0 - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/37573/info Discuz! is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues to execute arbitra...

Discuz! 2.0 - Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/37573/info Discuz! is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the...

Discuz 1.0 Cross Site Scripting

======================================================================================== | Title : Discuz Cross Site Scripting Vulnerability | Author : indoushka | email : [email protected] | Home : Souk Naamane - 04325 - Oum El Bouaghi - Algeria -00213771818860 | Total alerts found : 1 | Hig...

Discuz v1.0 SQL Injection Exploit Vulnerability

No description provided by source. ======================================================================================== | Title : Discuz Remote SQL Injection Exploit Vulnerability | Author : indoushka | email : [email protected] | Home : Souk Naamane - 04325 - Oum El Bouaghi - Algeria...

Discuz 1.03 - SQL Injection

Discuz 1.03 - SQL Injection ======================================================================================== | Title : Discuz Remote SQL Injection Exploit Vulnerability | Author : indoushka | email : [email protected] | Home : Souk Naamane - 04325 - Oum El Bouaghi - Algeria...