613 matches found
discuz x latest background Getshell detailed use method-vulnerability warning-the black bar safety net
User – the user column – the column packet – submit – capture I am in this error, be sure to submit, or catch the data packet is not the same | 1 | The Content-Disposition: form-data; name="settingnewprofilegroupnewbaseavailable" ---|--- Read: 1 | Content-Disposition: form-data;...
dz3. 0/2. 5 Background to get shell-vulnerability warning-the black bar safety net
To work seen after the tick community has released a discuz x3 the background to get the shell method, then t00ls members also tested discuz x2. 5 the background to get the shell method. A good ass is I tested didn't, caught the packet and the given case is not the same now! After the study found...
Discuz!插件注入漏洞
简要描述： Discuz!插件注入漏洞 详细说明： GET...
Discuz! X2.5 521交友插件 7.3 jiaoyou.php SQL注入漏洞
Discuz!是国内一款非常流行的论坛程序，其第三方插件521交友 7.3版本存在SQL注入漏洞，攻击者可以利用该漏洞，执行恶意SQL语句。 discuz!x2.5 521交友插件...
Discuz2. x-3. x tasteless through the kill injection vulnerability-vulnerability warning-the black bar safety net
The first description of this things of little value, test pass to kill 2. x-3. x, the following version didn't see the specific use of the method I also did not go to research, at most, mysql has file privilege when you can getshell, of course, discuz still a lot of places have issues, this is n...
Discuz!某处功能缺陷可导致特定情况下无视安全提问直接登录
简要描述： 详细说明： Discuz!X云平台有QQ互联功能，可使用QQ账号绑定论坛账户登陆论坛。但是，如果论坛账户设置了安全提问的情况下，使用关联的QQ账号登陆依然不需要安全提问，造成安全问题。 漏洞证明： 0x01.我在一次安全测试中拿下了某小型领主站的数据库，并把它还原到了我的phpmyadmin中。经过查找，其中有5d6d某版主的密码hash。（此处有一个提示，precommonmember表中保存的并不是真实的密码md5，真正的hash在preucentermembers表中，算法为md5md5$pass.$hash 0x02.把hash拿去cmd5解密...
Discuz! x2. 5 somewhere stored xss-vulnerability warning-the black bar safety net
Brief description: Discuz! x2. 5 somewhere in storagexss Relatively tasteless Detailed description: In forum home management Ban the user that Input you can manage the user name Then choose gag The reason that plug ! Vulnerability proof: !...
discuz! 7.* Stored xss-vulnerability warning-the black bar safety net
Post flash at the address filter is not strict, resulting in the storage typexss. ! document. writeACFLRunContent'width', '5 5 0', 'height', '4 0 0', 'allowNetworking', 'internal', 'allowScriptAccess', 'never', 'src', 'aaaaaaaaaaaaa', 'quality', 'high', 'bgcolor', 'ffffff', 'wmode', 'transparent'...
Discuz点触验证码插件验证绕过+密码明文传输
简要描述： 部分DZ论坛启用点触验证码后验证码完全没有起作用。同时由于更改了登录逻辑，还会造成论坛登录密码明文传输。 详细说明： 由于点触验证码插件的验证逻辑有问题，启用验证码之后可以简单绕过。同时由于更改了登录逻辑，会将DZ原本的md5传输的密文变成明文传输。 漏洞证明： 将红框中的display: none; 去掉，然后可以看到多了一个登录按钮。 这个按钮是没有启用验证逻辑的。直接输入用户名密码就可以登录。同时这样登录的话POST提交的是正常的md5加密后的密码。 但是如果输入验证码提交的话，POST数据就变成了： 其中可以看到明文的密码字段。...
Discuz! X2 V63积分商城插件 SQL注入漏洞
No description provided by source...
Discuz anti-injection function to bypass the method of analysis and useless heart repair patches-vulnerability warning-the black bar safety net
discuzdescription: Crossday Discuz! Board, hereinafter referred to as Discuz!, the China National copyright Bureau copyright registration No. 2006SR11895 is Kang Sheng Chong thinkBeijingTechnology Co., Ltd. （abbreviation Comsenz launch of a common set of community forums software system, the user...
XSS: discuz X2. 5 cross-site vulnerabilities using the method of analysis-vulnerability warning-the black bar safety net
0×0 1 cannot get the COOKIE Log analysis Say DISCUZ X2. 5, hereinafter referred to as DZ25 the COOKIES got there is no way to login, but why? Today a simple look, we log a DZ25 of the station, landing after a look at the COOKIE ! On the inside we turned down, you will find a HTTPONLY fields, or...
Discuz! X2.5 api.php 路径泄露
No description provided by source...
Discuz protection bypass analysis-vulnerability warning-the black bar safety net
! QQ 截图 20130320144758.jpg Final anti-injection checking function in discuzdatabasesafecheck::checkquery%s, The following protected static $checkcmd = array'SELECT', 'UPDATE', 'INSERT', 'REPLACE', 'DELETE'; protected static $config; public static function checkquery$sql if self::$config === null...
Part of the Discuz! The forum user can be any brush points-vulnerability warning-the black bar safety net
For some Discuz! Forum on the promotion visit this place not paying attention so the user can be any brush Forum user points and levels First click on the promotion to access ! You can see this interface “If you have a friend by one of the following links to access the site, you will get reward...
Discuz!x2.5某处存储xss
简要描述： Discuz!x2.5某处存储xss 比较鸡肋 详细说明： 在论坛首页管理 禁止用户那 输入你能管理的用户名称 然后选择禁言 理由那插 漏洞证明：...
discuz x1.5 x1.5.1 存储型xss（可定向攻击）
简要描述： discuz x1.5 x1.5.1 某处未过滤，形成存储型xss ，可窃取cookie。（很低调有木有。。） 详细说明： 添加好友的附言未作任何处理，导致可以插。 https://images.seebug.org/upload/201302/2521325724e668f21dd352d4830839e46dc461a6.png 对方点开提醒即生效。 https://images.seebug.org/upload/201302/2521353585462281cb56e45add569172a9842a85.png 漏洞证明：...
Discuz! X2.5 /source/function/function_core.php 跨站脚本漏洞
No description provided by source...