pigcms /index.php injection Vulnerability

0x01 漏洞简介 关键词：inurl:index.php?g=Home&m=Index&a=help intitle:营销系统 inurl:login 漏洞位置：index.php?m=Index&a=reg（注册页面） 0x02 漏洞利用 这里以http://.../index.php?m=Index&a=reg为例： 测试数据，截取数据包： POST /index.php?m=Users&a=checkreg HTTP/1.1 Host: ... Proxy-Connection: keep-alive Content-Length: 151 Cache-Control:...

NITC营销系统 index.php 参数language_id SQL注入

0x01漏洞简介 NITC营销系统在index.php对参数languageid过滤不严格，导致出现SQL注入漏洞。远程攻击者可以结合回显报错等方式执行SQL指令，获取敏感信息。 0x02漏洞证明 SQL注入漏洞位置： /index.php?languageid=1&isprotect=1&action=test languageid注入 0x03修复方案 过滤。...

Fanwe团购系统 index.php 任意删除漏洞

No description provided by source...

tipask index.php $_FILES 注入tipask index.php $_FILES 注入漏洞漏洞

No description provided by source...

网康 NS-ASG 应用安全网关 6.2 /3g/index.php SQL注入

No description provided by source...

vbmcms v7.0 index.php 参数userid SQL注入漏洞

No description provided by source...

Reflected Cross-Site Scripting Vulnerability in MetInfo Version 5.3.3

MetInfo is an enterprise website management system with PHP Mysql architecture. A reflective cross-site scripting vulnerability exists in MetInfo version 5.3.3. An attacker can exploit the vulnerability to conduct cross-site scripting attacks. The vulnerability exists in the following pages:...

trimmer.ru XSS vulnerability

Vulnerable URL: http://www.trimmer.ru/index.php?target=2 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 3764714 Google Pagerank| 2 VIP website status:| No Check trimmer.ru SSL...

ShopBuilder网上商城 ?m=vote&s=index&vid= (\module\vote\index.php文件)SQL注入漏洞

No description provided by source...

Pulse CMS 4.5.2 Local File Inclusion

Document Title: =============== Pulse CMS 4.5.2 - Local File Inclusion References Source: ==================== http://ehsansec.ir/advisories/plusecms452-lfi.txt Release Date: ============= 2016-02-28 Product & Service Introduction: =============================== Pulse CMS is the easiest way to...

ecmall 2.x index.php 修改任意密码漏洞

No description provided by source...

technocare.com.au XSS vulnerability

Vulnerable URL: http://technocare.com.au/index.php?id=153 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 7468523 Google Pagerank| 2 VIP website status:| No Check technocare.com.au...

mobile.jewishvaluesonline.org XSS vulnerability

Vulnerable URL: http://mobile.jewishvaluesonline.org/index.php Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated Google Pagerank| 0 VIP website status:| No...

Classic Infomedia Authentication Bypass

Document Title: =============== Classic Infomedia Login - Auth Bypass Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1679 Release Date: ============= 2016-01-25 Vulnerability Laboratory ID VL-ID: ==================================== 16...

MoMoCMS_v3.1 install/index.php重装系统

MoMoCMSv3.1企业建站系统 Install/index.php里没有进行判断lock，你们能判断一下lock吗？ 在install/index.php $document.readyfunction / setup navigation, content boxes, etc... / // validate signup form on keyup and submit var validator = $"loginform".validate rules: dbhost: "required", dbname: "required", dbuser: "required",...

shopnc o2o版 index.php?act=payment&op=notify SQL注入漏洞

No description provided by source...

Joomla Spider FAQ Component index.php 参数theme SQL注入漏洞

No description provided by source...

ThinkSNS index.php sql注入漏洞

No description provided by source...

Fanwe O2O商业系统index.php处的POST参数topic_id存在SQL注入漏洞

No description provided by source...

AppCMS v1.3 在index.php存在信息泄漏漏洞

No description provided by source...