576 matches found
Discuz <= 1.03 SQL Injection Exploit Vulnerability
Exploit for unknown platform in category web applications ================================================== Discuz = 1.03 SQL Injection Exploit Vulnerability ================================================== =======================================================================================...
Discuz! 1.0 - referer Cross-Site Scripting
Discuz! 1.0 - referer Cross-Site Scripting source: https://www.securityfocus.com/bid/37562/info Discuz! is prone to an cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in...
Discuz v1.0 XSS Vulnerability
No description provided by source. ======================================================================================== | Title : Discuz Cross Site Scripting Vulnerability | Author : indoushka | email : [email protected] | Home : Souk Naamane - 04325 - Oum El Bouaghi - Algeria...
Discuz 1.03 - SQL Injection
======================================================================================== | Title : Discuz Remote SQL Injection Exploit Vulnerability | Author : indoushka | email : [email protected] | Home : Souk Naamane - 04325 - Oum El Bouaghi - Algeria -00213771818860 | Total alerts found :...
Discuz! 1.0 - 'referer' Cross-Site Scripting
source: https://www.securityfocus.com/bid/37562/info Discuz! is prone to an cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the...
Discuz! 6.0.0&6.1.0 spache.php SQL注入漏洞
No description provided by source...
Discuz! 6.0.0&6.1.0&7.0.0 CSRF漏洞
No description provided by source...
discuz 6.1.0 cache.func.php 信息泄漏漏洞
No description provided by source...
discuz 4.1.0 index.php 跨站脚本漏洞
No description provided by source...
discuz 7.0 runwizard.inc.php 代码执行漏洞
No description provided by source...
discuz 7.0 frame.php 跨站脚本漏洞
No description provided by source...
discuz 6.1.0 Sql注入漏洞
No description provided by source...
discuz 6.1.0 member.php 跨站脚本漏洞
No description provided by source...
discuz 6.1.0 跨站脚本漏洞
No description provided by source...
Discuz! 5.x&6.x&7x 重置用户密码漏洞
No description provided by source...
discuz 5.0.0 Cookie.php 跨站脚本漏洞
No description provided by source...
Discuz! $_DCACHE 代码执行漏洞
测试版本： Discuz 6.x，7.x 漏洞成因： 1、使用全局变量 $GLOBALS'DCACHE' 时未作校验，导致攻击者可以在提交中构造恶意代码。 2、php函数 pregreplace 使用e修饰符时，将替换后的字符串作为php代码执行eval函数方式, 并使用执行结果作为实际参与替换的字符串。 验证方式： 1、进入本地测试地址：http://127.0.0.1/discuz7.2/Discuz7.2SCUTF8/upload/index.php 2、chrome F12 打开 console 设置 cookie，如图 3、如：依次点击进入【默认模块】-【7.2新增功能及功能强...
Discuz!NT 2.5 showuser.aspx SQL注入漏洞
No description provided by source...
discuz 6.1.0 database.inc.php 文件上传
No description provided by source...
Xss Discuz! version 5.0.0 RC1
No description provided by source. Xss Discuz! version 5.0.0 RC1 Author: SpiderZ Sito: http://www.spiderz.altervista.org Sito2: https://www.spiderz.netsons.org Download Board : http://www.discuz.com File: usearch.html ?site=www.discuz.net&kw= Message Script:...