Whitney Walton Internet behavior management system /base/message/welcome_pc.php parameter id SQL injection vulnerability

0x01 vulnerability description Whitney Walton Internet behavior management system in page/base/message/welcomepc. php for the GET parameter id filter is not strict, led to the emergence of SQL injection vulnerability. 0x02 vulnerability details File: base/message/welcomepc.php ? php $thisfile =...

Whitney Walton Internet behavior management system Getshell without login-bug warning-the black bar safety net

This set of system after login, the vulnerability of many shallow dug several no sign of vulnerability here to submit an getshell it. Detailed description: Vulnerability file: base/sys/tcpdump.php code area The vulnerability is simple, direct command execution getshell, exp not attached, write to...

Arbitrary File Download Vulnerability in Internet Behavior Management System of Shenzhen Wheaton Information Technology Co.

Shenzhen Wheaton Information Technology Co., Ltd. Internet behavior management system is a set of monitoring system for the user's online behavior. Shenzhen Wheaton Information Technology Co., Ltd. Internet behavior management system there are arbitrary file download vulnerability, there are...

Shenzhen Wheaton Information Technology Co., Ltd. internet behavior management system has HTTP header getshell vulnerability

Shenzhen Wheaton Information Technology Co., Ltd. Internet behavior management system is a set of monitoring system for the user's online behavior. Shenzhen Huilton Information Technology Co., Ltd. Internet behavior management system HTTP header can getshell vulnerability, there are vulnerabiliti...