Talking about the Discuz code hazard-vulnerability warning-the black bar safety net

In fact, this is also my posts unintentionally saw, as a forum owner, the management posts often depends on its content validity. For example, when a bias article provides a connection, we often will go to click it, but when we are the point of connection is not what we expect connection, we have...

Discuz! <= 4.0.0 rc4 Arbitrary File Upload Flaw

The remote host is using Discuz!, a popular web application forum in China. According to its version, the installation of Discuz! on the remote host fails to properly check for multiple extensions in uploaded files. An attacker may be able to exploit this issue to execute arbitrary commands on th...

PHP is a famous open source Forum: Discuz it! Cross-site Daquan-vulnerability warning-the black bar safety net

In the discuz! the The poster, back patch, PM, etc. of the subject are not filtered, so it can add the code. For example http://xxx/post.php?action=newthread&fid=2...cript%3E%3Cb%2 2 The effect is the first to pop your cookie Use method: put the above code placed into the img. Applicable version:...

For Discuz Forum, the intrusion-vulnerability warning-the black bar safety net

Recently nothing else, the rookie, set off a Discuz Forum, the invasion of the frenzy of the“movement.” Time trouble the entire security community is boiling endless. However, the site of the webmasters skill fairly agile, low version of the Discuz Forum also useless how long, will be put on a...

Discuz! <= 4.0.0 rc4 Arbitrary File Upload

The remote host is using Discuz!, a popular web application forum in China. According to its version, the installation of Discuz! on the remote host fails to properly check for multiple extensions in uploaded files. An attacker may be able to exploit this issue to execute arbitrary commands on th...

CVE-2005-2614

CVE-2005-2614 affects Discuz!

CVE-2005-2614

Discuz! 4.0 rc4 does not properly restrict types of files that are uploaded to the server, which allows remote attackers to execute arbitrary commands via a filename containing ".php.rar" or other multiple extensions that include .php...

CVE-2005-2614

Discuz! 4.0 rc4 does not properly restrict types of files that are uploaded to the server, which allows remote attackers to execute arbitrary commands via a filename containing ".php.rar" or other multiple extensions that include .php...

Discuz File Extension Validation Weakness Arbitrary File Upload

Binary data 3167.prm...

[UNIX] Discuz! Command Execution Vulnerability

The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion The SecuriTeam alerts list - Free, Accurate, Independent. Get your security news from a reliable source...

CVE-2004-0254

Cross-site scripting XSS vulnerability in Discuz! Board 2.x and 3.x allows remote attackers to execute arbitrary script as other users via an img tag...

CVE-2004-0254

CVE-2004-0254 describes a cross-site scripting (XSS) vulnerability in Discuz! Board 2.x and 3.x that allows a remote attacker to execute arbitrary script as other users via an img tag. The NVD entry lists a base score of 6.8 (Medium) with Network attack vector, no authentication, and partial impa...

CVE-2004-0254

Cross-site scripting XSS vulnerability in Discuz! Board 2.x and 3.x allows remote attackers to execute arbitrary script as other users via an img tag...

Possible Cross Site Scripting in Discuz! Board

Advisory Name:Possible Cross Site Scripting in Discuz! Board Release Date: Feb 5,2004 Application: Discuz! Board Version Affected: 2.x , 3.x Platform: PHP Severity: Low Discover: Cheng Peng Suapplesoupatmsn.com Vendor URL: http://www.discuz.com/ Proof Of Concept: A thread including:...

discuz.txt

Advisory Name:Possible Cross Site Scripting in Discuz! Board Release Date: Feb 5,2004 Application: Discuz! Board Version Affected: 2.x , 3.x Platform: PHP Severity: Low Discover: Cheng Peng Suapplesoupatmsn.com Vendor URL: http://www.discuz.com/ Proof Of Concept: A thread including:...

Discuz! 2.0/3.0 - Cross-Site Scripting

source: https://www.securityfocus.com/bid/9584/info It has been reported that Discuz! is prone to an Cross Site Scripting vulnerability. This issue is caused by the application failing to properly sanitize links embedded within user messages. Upon successful exploitation of this issue, a maliciou...