PHPWind passport_client.php文件UPDATE参数远程SQL注入漏洞

PHPWind的实现上存在变量过滤漏洞，远程攻击者可能利用此漏洞执行SQL注入攻击，非授权操作数据库，完全控制论坛。 PHPWind的passportclient.php文件里变量没有初始化，可以通过构造特定的变量值判断： codeif!$passportifopen || $passporttype != 'client' exit"Passport closedPHPWind"; //可以提交“passportifopen =1&passporttype=client”绕过 ifmd5$action.$userdb.$forward.$passportkey != $verify...

SFS Ez Forum (forum.php id) SQL Injection Vulnerability

No description provided by source. ================================================================================== SFS Forum forum.php id Remote SQL Injection Vulnerability ================================================================================== / / / / / / / // / / / / / / / / / / /...

sfsezforum-sql.txt

================================================================================== SFS Forum forum.php id Remote SQL Injection Vulnerability ================================================================================== / / / / / / / // / / / / / / / / / / / / // / / / / / // / // //,//...

SFS Ez Forum - SQL Injection

================================================================================== SFS Forum forum.php id Remote SQL Injection Vulnerability ================================================================================== / / / / / / / // / / / / / / / / / / / / // / / / / / // / // //,//...

SFS Ez Forum - SQL Injection

SFS Ez Forum - SQL Injection ================================================================================== SFS Forum forum.php id Remote SQL Injection Vulnerability ================================================================================== / / / / / / / // / / / / / / / / / / / / // ...

SFS Ez Forum (forum.php id) SQL Injection Vulnerability

Exploit for unknown platform in category web applications ======================================================= SFS Ez Forum forum.php id SQL Injection Vulnerability =======================================================...

Phorum admin.php3无需验证修改管理员口令漏洞

BUGTRAQ: 2271 Phorum是一款基于PHP的WEB论坛程序，可使用在Linux和Unix操作系统下，也可使用在Microsoft Windows操作系统下。Phorum存在一个问题，远程攻击者可以访问本地系统文件。 admin.php3脚本用于安全和管理被创建的论坛。它带有口令保护，但存在漏洞可以无需访问权限修改管理员口令。一旦拥有了管理功能的访问权限，就可以进入 Master Setting 功能，在 default .langfile name 输入框输入想要访问的系统本地文件，重新载入admin.php3页面后就可以浏览这个文件的内容了。 3.0.7 and...

BBSxp 2008 MoveThread.asp页面存在SQL注入漏洞

BBSXP为一款简单的ASP+SQL与ACCESS开发的多风格论坛 目前最新版本为BBSXP2008。漏洞文件:MoveThread.asp MoveThread.asp行2-24% if CookieUserName =empty then error"您还未a href=""javascript:BBSXPModal.Open 'Login.asp',380,170;""登录/a论坛" '保存cookie登陆即可 ThreadID=Request"ThreadID" ' Sql Injection Vulnerability If Not IsNumericThreadID then...

MYBBS系统存在漏洞

1.用户注册功能页面没有针对无用户名注册的过滤用户注册功能页面没有针对用户名的长度的过滤用户注册功能页面没有针对无密码用户的过滤用户注册功能页面没有针对用户签名以及个人介绍的字数限制用户注册功能页面没有针对用户头像大小以及规格的限制 2.论坛版面最新回复所调用字数的限制论坛版面发表新文章的主题字数限制论坛版面发表新文章内容部分的字数限制论坛版面发表新文章针对JS的过滤 3.论坛短信功能页面没有针对发表人以及回复人的限制论坛短信功能页面对于JS恶意代码的过滤（JS代码嵌入漏洞论坛短信功能页面没有针对发表后页面的时间限制（可以导致无限制短信DOS...

Phorum violation.php3转发任意邮件漏洞

BUGTRAQ: 2272 Phorum是一款基于PHP的WEB论坛程序，可使用在Linux和Unix操作系统下，也可使用在Microsoft Windows操作系统下。Phorum存在一个漏洞允许远程用户发送任意邮件，而且不需要任何验证。 violation.php3处理URL的参数，通过主机的MTA给Mod参数指定的email发送邮件，不过要记住的是，这封电子邮件会包含攻击者的IP（或代理服务器IP）和FQDN。恶意用户可能利用这个漏洞发送垃圾邮件或邮件炸弹等行径，可能让WEB主机的IP被加入垃圾邮件服务器的黑名单。 3.0.7 and Previous Brian Moon...

YDC (kdlist.php cat) Remote SQL Injection Vulnerability

No description provided by source. || | | YDC cat Remote SQL Injection Vulnerability | | |-------------------- Hussin X -------------------| | | Author: Hussin X | | Home : WwW.IQ-ty.CoM | | email: darkangelg85atYahooDoTcom | | | | | | script : http://www.ydc.ir/ | | DorK : "Powered by YDC" ||...

Smarty 2.6.20 php injection

2008-10-22 числа Secunia.com была найдена уязвимость в функции expandquotedtext полный текст http://secunia.com/Advisories/32329/. Разработчики попытались исправить уязвимость как видно из их кода http://smarty-php.googlecode.com/svn/trunk/libs/SmartyCompiler.class.php путем экранированием символ...

shopmaker-sql.txt

|| | | ShopMaker v1.0 product.php id Remote SQL Injection Vulnerability | | |-------------------- Hussin X -------------------| | | Author: Hussin X | | Home : WwW.IQ-ty.CoM | | email: darkangelg85atYahooDoTcom | | | | | | script : http://shop.maker.ir | | DorK : "ShopMaker v1.0" || Exploit:...

ParsBlogger - links.asp SQL Injection

ParsBlogger - links.asp SQL Injection || | | ParsBlogger links.asp id Remote SQL Injection Vulnerability | | |-------------------- Hussin X -------------------| | | Author: Hussin X | | Home : WwW.IQ-ty.CoM | | email: darkangelg85atYahooDoTcom | | | | | | script :...

easynet4uforum-sql.txt

Remote SQL Injection SuB-ZeRo SuB-ZeRo my best freinds :: x.CJP.X & ach2008 & carlos the jackel & HiSoK4 & bibi-info & crazy-zero all muslims...

Easynet4u Forum Host - forum.php SQL Injection

Easynet4u Forum Host - forum.php SQL Injection Remote SQL Injection SuB-ZeRo SuB-ZeRo my best freinds :: x.CJP.X & ach2008 & carlos the jackel & HiSoK4 & bibi-info & crazy-zero all muslims milw0rm.com 2008-10-10...

Easynet4u Forum Host - 'forum.php' SQL Injection

Remote SQL Injection SuB-ZeRo SuB-ZeRo my best freinds :: x.CJP.X & ach2008 & carlos the jackel & HiSoK4 & bibi-info & crazy-zero all muslims milw0rm.com 2008-10-10...

Easynet4u Forum Host (forum.php) SQL Injection Vulnerability

No description provided by source. Remote SQL Injection SuB-ZeRo CoNsTaTiNe HaCkErS25 walid SuB-ZeRo author : SuB-ZeRo contact : [email protected] scrit: forumhost buy script : http://www.easynet4u.com/easyshop/index.php?do=catalog&c=remotelyhostedscripts&i=forumhost dork : find it exploit:...

The latest Discuz! NT2. 5 vulnerability to report! - Vulnerability warning-the black bar safety net

Title: the latest Discuz! NT2. 5 vulnerability to report! Author: hackest H. S. T. This article has been published in the hacker X-Files for 2 0 0 8 P 1 0 issue of the magazine on After the author published on the blog, such as reproduced please retain this information! Summer, passion in August,...

[OPENX-SA-2008-002] OpenX 2.4.9 and 2.6.2 fix SQL injection vulnerability

======================================================================== OpenX security advisory OPENX-SA-2008-002 ------------------------------------------------------------------------ Advisory ID: OPENX-SA-2008-002 Date: 2008-Oct-06 Security risk: Moderately critical Applications affetced:...