613 matches found
discuz! 7.1 and 7.2 remote code execution vulnerability exp-vulnerability warning-the black bar safety net
Excerpts from: 1 9 4 3'S BLOG Thanks WJS and the icy sun, laojun analysis, I will not say more, the use of exp then only the machine testing, and other purposes at your own risk! The first method: First register a user and then put form method="post" action=" " enctype="multipart/form-data" Post...
Discuz! 'referer'参数跨站脚本漏洞
Bugraq ID: 37562 Comsenz Discuz!是一款流行的论坛程序。 Comsenz Discuz!存在输入验证错误，远程攻击者可以利用漏洞进行跨站脚本攻击获得敏感信息。 问题是'member.php'脚本对'referer'参数缺少过滤，构建恶意脚本代码作为参数数据，并诱使用户访问恶意链接，可触发恶意脚本代码在目标用户浏览器上执行，导致敏感信息泄漏。 Comsenz Discuz! 1.0 目前没有解决方案提供： http://www.discuz.com/...
Discuz! 'name'参数SQL注入漏洞
Bugraq ID: 37556 Comsenz Discuz!是一款流行的论坛程序。 Comsenz Discuz!存在输入验证错误，远程攻击者可以利用漏洞进行SQL注入攻击，获得密码HASH等敏感信息。 问题是'misc.php'脚本对'name'参数缺少过滤，构建恶意SQL查询作为参数数据，可更改原来的SQL逻辑，获得敏感信息或操作数据库。 Comsenz Discuz! 7.x 目前没有解决方案提供： http://www.discuz.com/ !/usr/bin/perl use IO::Socket; print q Discuz Remote SQL Injection...
Discuz! 5.0.0 Cross Site Scripting
======================================================================================== | Title : Discuz! 5.0.0 Cross Site Scripting Vulnerability | Author : indoushka | email : [email protected] | Home : Souk Naamane - 04325 - Oum El Bouaghi - Algeria -00213771818860 | Total alerts found : ...
Discuz 2.0 Cross Site Scripting
======================================================================================== | Title : Discuz 2.0 Cross Site Scripting Vulnerability | Author : indoushka | email : [email protected] | Home : Souk Naamane - 04325 - Oum El Bouaghi - Algeria -00213771818860 | Total alerts found : 1 |...
Discuz! 2.0 - Multiple Cross-Site Scripting Vulnerabilities
Discuz! 2.0 - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/37573/info Discuz! is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues to execute arbitra...
Discuz! 2.0 - Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/37573/info Discuz! is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the...
Discuz 1.0 Cross Site Scripting
======================================================================================== | Title : Discuz Cross Site Scripting Vulnerability | Author : indoushka | email : [email protected] | Home : Souk Naamane - 04325 - Oum El Bouaghi - Algeria -00213771818860 | Total alerts found : 1 | Hig...
Discuz 1.03 - SQL Injection
Discuz 1.03 - SQL Injection ======================================================================================== | Title : Discuz Remote SQL Injection Exploit Vulnerability | Author : indoushka | email : [email protected] | Home : Souk Naamane - 04325 - Oum El Bouaghi - Algeria...
Discuz! 1.0 - referer Cross-Site Scripting
Discuz! 1.0 - referer Cross-Site Scripting source: https://www.securityfocus.com/bid/37562/info Discuz! is prone to an cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in...
Discuz v1.0 XSS Vulnerability
No description provided by source. ======================================================================================== | Title : Discuz Cross Site Scripting Vulnerability | Author : indoushka | email : [email protected] | Home : Souk Naamane - 04325 - Oum El Bouaghi - Algeria...
Discuz v1.0 SQL Injection Exploit Vulnerability
No description provided by source. ======================================================================================== | Title : Discuz Remote SQL Injection Exploit Vulnerability | Author : indoushka | email : [email protected] | Home : Souk Naamane - 04325 - Oum El Bouaghi - Algeria...
Discuz 1.03 - SQL Injection
======================================================================================== | Title : Discuz Remote SQL Injection Exploit Vulnerability | Author : indoushka | email : [email protected] | Home : Souk Naamane - 04325 - Oum El Bouaghi - Algeria -00213771818860 | Total alerts found :...
Discuz <= 1.03 SQL Injection Exploit Vulnerability
Exploit for unknown platform in category web applications ================================================== Discuz = 1.03 SQL Injection Exploit Vulnerability ================================================== =======================================================================================...
Discuz! 1.0 - 'referer' Cross-Site Scripting
source: https://www.securityfocus.com/bid/37562/info Discuz! is prone to an cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the...
Discuz! 6.0.0&6.1.0 spache.php SQL注入漏洞
No description provided by source...
discuz 4.1.0 index.php 跨站脚本漏洞
No description provided by source...
discuz 6.1.0 Sql注入漏洞
No description provided by source...