Discuz!NT 3.1.0 多处存在跨站漏洞

北洋贱队（http://bbs.seceye.org）首发 1.在快速搜索区域的“板块”搜索提交跨站测试语句"iframe+Src=http://www.gohack.org， 获得地址：http://localhost/bbs/forumsearch.aspx?q=%22%3E%3Ciframe%20src%3Dhttp%3A//www.gohack.org%3E 2.在论坛板块版面出随意选择一种浏览方式，然后修改或添加加入跨站语句，获得地址：...

BBSXP 2008 Cross Site Scripting Vulnerability

Exploit for unknown platform in category web applications ============================================= BBSXP 2008 Cross Site Scripting Vulnerability ============================================= BBSXP is prone to an cross-site scripting vulnerability because the application fails to properly...

Discuz! 6.0 - 'uid' Cross-Site Scripting

source: https://www.securityfocus.com/bid/38484/info Discuz! is prone to an cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the...

[xss] i found a Cross Site Scripting Vulnerability about Discuz! 'uid' Parameter

i'm sorry, i just write some real sites to confirm the truth of my found, now , i remove it. and thanks for you. Discuz! is prone to an cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitra...

Discuz! 6.0 - uid Cross-Site Scripting

Discuz! 6.0 - uid Cross-Site Scripting source: https://www.securityfocus.com/bid/38484/info Discuz! is prone to an cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the...

Discuz! 7.0-7.2 the background settings. inc. php to write shell vulnerability-vulnerability warning-the black bar safety net

Impact version Discuz! 7.0-7.2 Vulnerability details: if$operation == 'uc' && iswriteable'./ config.inc.php' && $isfounder $ucdbpassnew = $settingsnew'uc''dbpass' == '' ? UCDBPW : $settingsnew'uc''dbpass'; if$settingsnew'uc''connect' $ucdblink = @mysqlconnect$settingsnew'uc''dbhost',...

Discuz!7.0-7.2后台settings.inc.php中写shell漏洞

漏洞详情： if$operation == 'uc' && iswriteable'./config.inc.php' && $isfounder $ucdbpassnew = $settingsnew'uc''dbpass' == '' ? UCDBPW : $settingsnew'uc''dbpass'; if$settingsnew'uc''connect' $ucdblink = @mysqlconnect$settingsnew'uc''dbhost', $settingsnew'uc''dbuser', $ucdbpassnew, 1; if!$ucdblink...

Discuz plug-in the virtual stock market of blind Injection Vul exploit-vulnerability warning-the black bar safety net

Vulnerability discovery from a station of the penetration, due to its discuz version 7. 0, so I can only put the eye is focused on the installation of third-party plug-ins. After a simple test, it is found that the virtual stock market of the presence of injection vulnerabilities:...

Discuz! 'tid' Parameter Cross Site Scripting Vulnerability

Discuz! is prone to an cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the...

Discuz! version 5.0.0 suffers from a cross site scripting vulnerability

No description provided by source. ======================================================================================== | Title : Discuz! 5.0.0 Cross Site Scripting Vulnerability | Author : indoushka | email : [email protected] | Home : Souk Naamane - 04325 - Oum El Bouaghi - Algeria...

Discuz! 6.0 - 'tid' Cross-Site Scripting

source: https://www.securityfocus.com/bid/37982/info Discuz! is prone to an cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the...

Discuz! 6.0 - tid Cross-Site Scripting

Discuz! 6.0 - tid Cross-Site Scripting source: https://www.securityfocus.com/bid/37982/info Discuz! is prone to an cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the...

Discuz! 6.0.0 Cross Site Scripting

Discuz! 6.0.0 Download: http://www.comsenz.com/downloads/install/discuz Vendor: www.comsenz.com Author: s4r4d0 mail: [email protected] Bug: Cross site scripting has benn found on viewthread.php file. Exploit: http://host/bbs/viewthread.php?tid=Xss Demo:...

CVE-2009-4621

SQL injection vulnerability in the JiangHu Inn plugin 1.1 and earlier for Discuz! allows remote attackers to execute arbitrary SQL commands via the id parameter in a show action to forummission.php...

CVE-2009-4621

The CVE-2009-4621 entry describes an SQL injection vulnerability in the JiangHu Inn plugin version 1.1 and earlier for Discuz!. The issue arises from a vulnerable id parameter in the show action to forummission.php, enabling remote attackers to execute arbitrary SQL commands. Public references co...

CVE-2009-4621

SQL injection vulnerability in the JiangHu Inn plugin 1.1 and earlier for Discuz! allows remote attackers to execute arbitrary SQL commands via the id parameter in a show action to forummission.php...

CVE-2009-4621: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the JiangHu Inn plugin 1.1 and earlier for Discuz! allows remote attackers to execute arbitrary SQL commands via the id parameter in a show action to forummission.php...

Discuz! 7.0-7.2 & Phpwind7. 5 Background tasteless vulnerability-vulnerability warning-the black bar safety net

| Transfer from t00ls A lot of people there, spread out, and then sent to. Now the loophole if the initiative is published, is definitely“no. do not publish”, otherwise is definitely hiding unless someone else posted. DZ tasteless that need the Creator's permission, the Creator of the password is...

Hacking tip: provide the right technical study _Discuz! Administrator a copy-and-vulnerability warning-the black bar safety net

Crossday Discuz! Board Forum systemDiscuz! Forumis the one using PHP and MySQL, and other various databases to build efficient forum to resolvethe programme. As a commercial software product, Discuz! In code quality, operational efficiency, load capacity, security level, functional control and...

Discuz! 7.1 & 7.2 remote code execution vulnerability-vulnerability warning-the black bar safety net

First of all the way, vulnerability is t00ls heart of the Swarm spread out, xhming go read, and then I later read, the read-out of all code execution, 1 On 5 The Night of 1 1 o'clock, in the core group of hackers, xhming gave a poc, I gave an exp, do find the same problem. Off night 2 points more...