1090 matches found
Tipask 2.0前台任意文件删除漏洞
No description provided by source...
Tipask前台/?user/register.html无条件注入漏洞
No description provided by source...
fengcms_v1.32.beta 前台SQL注入
No description provided by source...
Coinbase: User's legal name could be changed despite front end controls being disabled
Despite the front-end form fields being disabled, a user could still change his/her legal name by manually manipulating the form in developer tools, or by manually creating a POST request with the necessary parameter names and values...
The vulnerability of Google Chrome browser allows a violator to circumvent existing access restrictions.
The vulnerabilities of the browser/devtools/devtoolsuibindings.cc and WebKit/Source/devtools/frontend/Runtime.js functions within the Developer Tools subsystem of the Google Chrome browser are related to deficiencies in access control. Exploiting these vulnerabilities allows a malicious actor to...
File upload vulnerability example analysis-vulnerability warning-the black bar safety net
Principles File upload is a Web application that often appear in the function,it allows users to upload files to the server and saved to a specific location. This security is a very sensitive issue, once the malicious program is uploaded to the server and get the Execute permission, the...
Universal Analytics <= 1.3.0 - Authenticated Cross-Site Scripting (XSS)
"A subscriber could update the plugins settings via the URL or AJAX. The settings were not sanitized before saving to the database and not escaped before outputted on the front end."...
jeecms前台在/member/o_upload_image.jspx存在文件上传漏洞
No description provided by source...
YouYaX论坛前台任意账户登入（cookie伪造）漏洞
No description provided by source...
TYPO3 Front-end Component Cross-Site Scripting Vulnerability
TYPO3 is a free and open source content management system framework CMS/CMF maintained by the Swiss TYPO3 Association. A cross-site scripting vulnerability exists in the front-end component of TYPO3 versions 6.2.x before 6.2.16 and 7.x before 7.6.1. A remote attacker can exploit this vulnerabilit...
WordPress Poll Widget 1.0.7 SQL Injection
Exploit Title : wordpress poll widget version 1.0.7 SQL Injection vulnerability Author : WICS Date : 7/12/2015 Software Link : https://wordpress.org/plugins/polls-widget/ Affected Version: 1.0.7 and below Overview: Poll widget is wordpress plugin which provide fancy user Polling layout to website...
WordPress Users Ultra 1.5.50 Cross Site Scripting
Exploit Title: WordPress Users Ultra Plugin Persistence XSS Discovery Date: 2015/10/20 Public Disclosure Date: 2015/12/01 Exploit Author: Panagiotis Vagenas Contact: https://twitter.com/panVagenas Vendor Homepage: http://usersultra.com Software Link: https://wordpress.org/plugins/users-ultra/...
kppw最新版前台sql注入
简要描述： 我这么认真，你们还是给我点对应的rank吧 详细说明： 算上关联的函数，本来还有很多的，我自己也没有找了， 我测试的是utf版本的，你们gbk版本由于这个问题已经炸了，希望好好审查 下面我拿 control\user\messagesend.php文件举例，同样问题的我找的还有 message.php,yijia.php setUid $gUid ; $objMsgM-setUsername $username ; $objMsgM-setTouid $arrSpaceInfo 'uid' ; $objMsgM-setTousername $arrSpaceInfo...
【齐博b2b商务系统】前台多处存储型xss直打后台admin
简要描述： 来一发..... 详细说明： 齐博官网下载第一栏的最新版b2b商务系统作测试。 环境：win7+xampp php 以普通用户权限注册一个号 账号为test 目标取得后台admin权限（Cookies） 在会员中心右栏发表文章，文章发表栏任意 填完数据后提交， burp抓包，改postdbcontent栏，如图 提交。 漏洞证明： 因为默认文章需要后台审核后才能发布，用admin登陆后台审核文章。 https://images.seebug.org/upl...
Open-Xchange Server and Open-Xchange AppSuite Front End Cross-Site Scripting Vulnerabilities
Open-Xchange Server is a semi-open source project mainly used for developing collaboration software; OX AppSuite is a set of Web cloud desktop environment. A cross-site scripting vulnerability exists in the dialogs for printing content in the Front End of Open-Xchange Server and OX AppSuite, whic...
Server: PHP arbitrary class instantiation in "files_external"
A user may instantiate arbitrary ownCloud classes due to a lack of a proper check of the mount point options provided by a user via the web front end. These may include constructor arguments and could potentially lead to a remote code execution. For more information please consult the official...
SOL17309 - Linux kernel vulnerability CVE-2015-5366
Note: As of February 17, 2015, AskF5 Security Advisory articles include the Severity value. Security Advisory articles published before this date do not list a Severity value. Recommended Action If the previous table lists a version in the Versions known to be not vulnerable column, you can...
phpcms投票功能前台代码执行
No description provided by source...
Discuz 前台回帖 存储型 DOM XSS
产生原因： JS原生取ELEMENT中HTML内容的方法，会将服务端转义过的单双引号实体编码进行反转。 代码分析： 这里有payload: align="onmouseover="alert1, 那么就从payload开始往回看漏洞是怎么产生的 align="onmouseover="alert1 回帖之后payload显示如上述所示, 跟进 管理员/版主 编辑帖子时的操作 var editorid = 'e'; var textobj = $editorid + 'textarea'; 这里得到textobj = 'etextarea' /static/js/common.js...
