Arbitrary File Write Vulnerability in FineCMS Backend

FineCMS is a small and medium-sized content management system based on PHP+MySql+CI framework. An arbitrary file write vulnerability exists in the config/site.ini.php page of the FineCMS backend. Allows attackers to upload webshell and gain server privileges...

FineCMS AttachmentController arbitrary file upload vulnerability

Source link: http://www.hackersb.cn/shenji/170.html Is still AttachmentController, of course, this is no longer kindeditorupload upload the file and then include the file so simple, but directly uploaded the script execution. This time the problem is ajaxswfuploadAction method, the method code is...

Finecms 2.0.1 background GETSHELL 0DAY-vulnerability warning-the black bar safety net

FineCMS have a cache function, and when the Wordpress like, there is a cache function and cache file name is not random and the suffix is php, it leads to a can use background cache function getshell it. Below is the Payload PHP | 1 2 3 4 5 6 7 8 9 1 0 1 1 1 2 1 3 1 4 1 5 1 6 1 7 1 8 | POST /inde...

FineCMS Enterprise Email Parameter SQL Injection Vulnerability

FineCMS is a small and medium-sized content management system based on PHP+MySql+CI framework. An SQL injection vulnerability exists in the email parameter of FineCMS Enterprise Edition, as the program fails to adequately filter the email parameter, allowing attackers to exploit the vulnerability...

FineCMS /controllers/member/ContentController.php id parameter SQL injection

No description provided by source...

FineCMS 企业版后台模板管理任意文件上传漏洞

No description provided by source...

Design Logic Vulnerabilities in FineCMS Backend Template Management

FineCMS is a web content management system developed by Chengdu Tianrui Information Technology Company Limited based on CI framework. There is a design flaw in the Edit Template Files feature in the Template Management of the FineCMS administration backend that does not check the extensions of th...

FineCMS企业最新版本后台post SQL注入漏洞

No description provided by source...

finecms <= 2.3.0 arbitrary User Password Change-bug-warning-the black bar safety net

Impact version 1 4 4 1 8 Number Update 2. 3. 0 and previous versions. The latest version does not have this problem. Clouds explosion over a the use of violence to crack the code a way to reset the password, here the manner discussed with respect to the brute-force to lower costs. Looking directl...

FineCMS高级版前台getshell(demo成功)

简要描述： demo也shell了哦 详细说明： 看到\member\api\uc.php define'DISCUZROOT', dirnamedirnamedirnameFILE.'/member/ucenter/'; include DISCUZROOT.'api/uc.php'; 就是包含了uc的那个插件。但是这个功能只有高级版才有，免费版没有 然后uckey都是默认的 8808cer8o1UJsEpt2G2Jn0uhEn/YgEva589Mfo0 然后就可以直接getshell了 附上脚本 ! /usr/bin/env python coding=utf-8 import...

FineCms 免费版任意文件上传漏洞

路径：dayrui/libraries/Chart/ofcuploadimage.php $defaultpath = '../tmp-upload-images/'; if !fileexists$defaultpath mkdir$defaultpath, 0777, true; $destination = $defaultpath . basename $GET 'name' ; echo 'Saving your image to: '. $destination; $jfh = fopen$destination, 'w' or die"can't open file";...

FineCMS 2.5.2 /extensions/ucenter/api/uc.php 代码执行

No description provided by source...

FineCMS 2.5.2 /controllers/member/ContentController.php SQL注入

No description provided by source...

finecms v1.9.5 has a local file inclusion vulnerability

FineCMS is a content management system based on PHP+MySql. A local file inclusion vulnerability exists in finecms v1.9.5. Allows attackers to upload webshell, gain server privileges, and cause information leakage...

fineCMS Local File Inclusion Vulnerability

FineCMS is a small and medium-sized content management system based on PHP+MySql+CI framework. A file inclusion vulnerability exists in finecms 1.9.5 and earlier versions, which can be successfully exploited by attackers to execute arbitrary php code...

Finecms v1.9.3 Arbitrary File Upload Vulnerability

FineCMS is a small and medium-sized content management system based on PHP+MySql+CI framework. An upload vulnerability exists in finecms 1.9.3, which allows attackers to upload a php-type webshell, which in turn controls the entire system...

FineCMS一处SQL注入

简要描述： 某处过滤不严格导致sql注入 详细说明： 在用户修改个人头像的地方： http://localhost:8081/index.php?s=member&c=info&a=avatar 没有对提交的参数进行过滤： $data = $this-input-post'data', TRUE; 直接带入了sql查询： $this-member-updatearray'avatar'= $data'avatar', 'id=' . $this-memberinfo'id'; 于是造成注入，本人使用如下注入代码： 'or updatexml1,concat0x7e,version,0...

fineCMS免费版某处又一sql注入

简要描述： 这次让我先呵呵！！！ 详细说明： 会员中心，文章-先发表一篇文章，然后去修改，看看修改的代码 controllers/member/ContentController.php public function editAction 。。。。 if $this-post'submit' $data = $data; unset$data; $data = $this-post'data'; /printr$data; exit;/ if empty$data'title' $this-memberMsglang'm-con-13'; if $data'catid' != $cat...

fineCMS免费版注入再来一弹

简要描述： 抢先呵呵!!! 详细说明： 问题文件： /controllers/member/InfoController.php public function favoriteAction $favorite = $this-model'favorite'; if $this-isPostForm $ids = ''; foreach $this-post'ids' as $i $ids.= ','.int$i; $ids = trim$ids, ','; if empty$ids $this-memberMsglang'm-inf-11'; $ids = @implode',',...

FineCMS免费版无限制GETshell

简要描述： 66666666666666FineCMS免费版无限制GETshell 详细说明： http://www.jwss.cc/?q=Powered%20by%20FineCMS%E5%85%8D%E8%B4%B9%E7%89%88&pn=100 案例：http://www.luyoutu.com/ http://www.qianjin998.com/ http://dery.cn/ http://www.xiaomixifan.cn/ http://www.yyxly.com/ http://mylhealth.com/ /plugins/mbak/ebak/index.php...