Iwebsns最新版SQL注入第七枚（多个漏洞打包）

简要描述： Iwebsns最新版SQL注入第七枚（多个漏洞打包） 详细说明： 在wooyun上看到雨牛提了5个iwebsns的漏洞了（ WooYun: Iwebsns sql 第五枚。 ），我来捡捡漏儿吧，已对比，不重复，下载Iwebsns最新的1.1.0来看看。 为了使审核的大大们容易确认是否有重复，我先把存在漏洞的文件和注入参数分别写在这里：/action/poll/polladd.action.php sex noreply maxchoice 这个文件中的 sex noreply maxchoice三个参数都存在同样的注入漏洞，如下图 这里就一起提了吧，以sex为例进行证明。...

XYCMS企业建站系统 2.5(注射&&后台配置插马)

简要描述： 前年她17岁，她看到我的IPad，说“姐夫，你的IPad不错嘛！” 她回去的时候，她姐姐把IPhone给她带上了。 去年她18岁，她看到我的IBM后，说“姐夫，你的IBM不错嘛！” 她回去的时候，她姐姐把IBM笔记本给她带上了。 今年她19岁，她看到我后，害羞的说：“姐夫，其实你这人挺不错的” 我在等她姐姐发话。 详细说明： 1 存在注入漏洞文件： newsdetail.asp 1-14行 无此新闻信息！" response.End end if % id没过滤进入查询 同样的问题：common.asp pro.asp news.asp prodetail.asp 漏洞证明：...

Critical: Red Hat Security Advisory: rubygem-openshift-origin-node security update

An updated rubygem-openshift-origin-node package that fixes one security issue and several bugs is now available for Red Hat OpenShift Enterprise 2.1.1. The Red Hat Security Response Team has rated this update as having Critical security impact. A Common Vulnerability Scoring System CVSS base...

Fonality trixbox - mac Remote Code Injection

Fonality trixbox - mac Remote Code Injection App : Trixbox all versions vendor : trixbox.com Author : i-Hmx mail : [email protected] Home : security arrays inc , sec4ever.com ,exploit4arab.net Well well well , we decided to give schmoozecom a break and have a look @ fonality products do you think...

RHEL 5 / 6 : cobbler (RHSA-2012:1060)

The remote Redhat Enterprise Linux 5 / 6 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2012:1060 advisory. Cobbler is a network install server. Cobbler supports PXE, virtualized installs, and re-installing existing Linux machines. A command injection...

Moderate: Red Hat Security Advisory: perl security update

Updated perl packages that fix multiple security issues are now available for Red Hat Enterprise Linux 4 and 5. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings,...

MIT (ILP) hacked by Cyber_Owner

MIT ILP hacked by CyberOwner 5 Days before MIT's website https://ilp.mit.edu/ was got hacked by a hacker named CyberOwner . This was reported by Korben. According to screenshot it seems that the site ILP International Liaison Program at MIT has been hacked. The flaw would be a SQL injection flaw...

Design/Logic Flaw

Mozilla Firefox before 3.5.16 and 3.6.x before 3.6.13, and SeaMonkey before 2.0.11, does not properly handle injection of an ISINDEX element into an about:blank page, which allows remote attackers to execute arbitrary JavaScript code with chrome privileges via vectors related to redirection to a...

phpBB - 'viewtopic.php' Arbitrary Code Execution (Metasploit)

$Id: phpbbhighlight.rb 9671 2010-07-03 06:21:31Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework...

PacketFence Network Access Controller Cross Site Scripting

Title : Injection Flaw in PacketFence Network Access Controller Date : 20-12-2009 Author : K053 Tested on : Private Networks Download : http://www.packetfence.org/download/releases.html Note : ------ PacketFence is a fully supported, Free and Open Source network access control NAC system...

PacketFence Network Access Controller XSS vulnerability

Exploit for unknown platform in category web applications ======================================================= PacketFence Network Access Controller XSS vulnerability ======================================================= Title : Injection Flaw in PacketFence Network Access Controller Date :...

PacketFence Network Access Controller XSS vulnerability

No description provided by source. Title : Injection Flaw in PacketFence Network Access Controller Date : 20-12-2009 Author : K053 Tested on : Private Networks Download : http://www.packetfence.org/download/releases.html Note : ------ PacketFence is a fully supported, Free and Open Source network...

PacketFence Network Access Controller - Cross-Site Scripting

PacketFence Network Access Controller - Cross-Site Scripting Title : Injection Flaw in PacketFence Network Access Controller Date : 20-12-2009 Author : K053 Tested on : Private Networks Download : http://www.packetfence.org/download/releases.html Note : ------ PacketFence is a fully supported, Fr...

PacketFence Network Access Controller - Cross-Site Scripting

Title : Injection Flaw in PacketFence Network Access Controller Date : 20-12-2009 Author : K053 Tested on : Private Networks Download : http://www.packetfence.org/download/releases.html Note : ------ PacketFence is a fully supported, Free and Open Source network access control NAC system...

CVE-2008-2760

SQL injection vulnerability in searchbanners.asp in Xigla Absolute Banner Manager XE 2.0 allows remote authenticated administrators to execute arbitrary SQL commands via the orderby parameter...

PT-2007-2239 · Globalmegacorp · Dvddb

Name of the Vulnerable Software and Affected Versions: GlobalMegaCorp dvddb version 0.6 Description: The issue concerns a SQL injection vulnerability, which allows remote attackers to execute arbitrary SQL commands. This is achieved via the user parameter. However, it's worth noting that the...

OpenGuestbook 0.5 - 'view.php?offset' SQL Injection

source: https://www.securityfocus.com/bid/18666/info OpenGuestbook is prone to multiple input-validation vulnerabilities, including cross-site scripting and SQL-injection issues, because the application fails to properly sanitize user-supplied input. A successful exploit of these vulnerabilities...

GLSA-200606-13 : MySQL: SQL Injection

The remote host is affected by the vulnerability described in GLSA-200606-13 MySQL: SQL Injection MySQL is vulnerable to an injection flaw in mysqlrealescape when used with multi-byte characters. Impact : Due to a flaw in the multi-byte character process, an attacker is still able to inject...

MySQL: SQL Injection

Background MySQL is a popular multi-threaded, multi-user SQL server. Description MySQL is vulnerable to an injection flaw in mysqlrealescape when used with multi-byte characters. Impact Due to a flaw in the multi-byte character process, an attacker is still able to inject arbitary SQL statements...

Greymatter gm.cgi HTML injection flaw

The remote host is using Greymatter, an opensource weblogging and journal software written in perl. A vulnerability exists in this version which may allow an attacker to execute arbitrary HTML and script code in the context of the user's browser. OpenVAS Vulnerability Test $Id:...