JEECMS后台任意文件编辑漏洞and官方漏洞及拿shell

简要描述： JEECMS后台任意文件编辑漏洞以及官方的demo站、官方服务器安全问题 详细说明： 2.x后台： login/Jeecms.do 3.x后台： jeeadmin/jeecms/index.do 默认账户：admin 默认密码：password 获取tomcat密码： /jeeadmin/jeecms/template/vedit.do?root=../../conf/&name=../../conf/tomcat-users.xml 获取JDBC数据库账号密码：...

CVE-2000-1247

The CVE affects Apache JServ 1.1.2, specifically the jserv-status handler in jserv.conf. Its default configuration includes an allow from 127.0.0.1 line, allowing local users to access the jserv/ URI and disclose JDBC passwords or other sensitive information. The available documents do not specif...

PT-2011-1255

Name of the Vulnerable Software and Affected Versions Apache JServ version 1.1.2 Description The default configuration of the jserv-status handler in jserv.conf includes an "allow from 127.0.0.1" line. This allows local users to discover JDBC passwords or other sensitive information via a direct...

CVE-2000-1247: Undefined Security Weakness

The default configuration of the jserv-status handler in jserv.conf in Apache JServ 1.1.2 includes an "allow from 127.0.0.1" line, which allows local users to discover JDBC passwords or other sensitive information via a direct request to the jserv/ URI...

JDK unspecified vulnerability in JDBC component

Unspecified vulnerability in the Java Runtime Environment JRE in Oracle Java SE and Java for Business 6 Update 23 and earlier, and 5.0 Update 27 and earlier, allows remote untrusted Java Web Start applications and untrusted Java applets to affect confidentiality and integrity via unknown vectors...

JDK unspecified vulnerability in JDBC component

Unspecified vulnerability in the Java Runtime Environment JRE in Oracle Java SE and Java for Business 6 Update 23 and earlier, and 5.0 Update 27 and earlier, allows remote untrusted Java Web Start applications and untrusted Java applets to affect confidentiality and integrity via unknown vectors...

RHEL 6 : java-1.6.0-ibm (RHSA-2011:0357)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2011:0357 advisory. The IBM 1.6.0 Java release includes the IBM Java 2 Runtime Environment and the IBM Java 2 Software Development Kit. This update fixes severa...

JDK unspecified vulnerability in JDBC component

Unspecified vulnerability in the Java Runtime Environment JRE in Oracle Java SE and Java for Business 6 Update 23 and earlier, and 5.0 Update 27 and earlier, allows remote untrusted Java Web Start applications and untrusted Java applets to affect confidentiality and integrity via unknown vectors...

Oracle Java SE Code Execution Vulnerabilities (Windows)

This host is installed with Sun Java SE and is prone to multiple code execution vulnerabilities. OpenVAS Vulnerability Test $Id: secpodoraclejavamultcodeexecvulnwin.nasl 7699 2017-11-08 12:10:34Z santu $ Oracle Java SE Code Execution Vulnerabilities Windows Authors: Madhuri D Copyright: Copyright...

CVE-2010-4468

Unspecified vulnerability in the Java Runtime Environment JRE in Oracle Java SE and Java for Business 6 Update 23 and earlier, and 5.0 Update 27 and earlier, allows remote untrusted Java Web Start applications and untrusted Java applets to affect confidentiality and integrity via unknown vectors...

CVE-2010-4468

Unspecified vulnerability in the Java Runtime Environment JRE in Oracle Java SE and Java for Business 6 Update 23 and earlier, and 5.0 Update 27 and earlier, allows remote untrusted Java Web Start applications and untrusted Java applets to affect confidentiality and integrity via unknown vectors...

CVE-2010-4468

CVE-2010-4468 affects Oracle Java SE and Java for Business (JRE) 6 Update 23 and earlier, and 5.0 Update 27 and earlier. The provided description states an unspecified vulnerability in the JRE that allows remote, untrusted Java Web Start applications and untrusted applets to compromise confidenti...

JDK unspecified vulnerability in JDBC component

Unspecified vulnerability in the Java Runtime Environment JRE in Oracle Java SE and Java for Business 6 Update 23 and earlier, and 5.0 Update 27 and earlier, allows remote untrusted Java Web Start applications and untrusted Java applets to affect confidentiality and integrity via unknown vectors...

PT-2011-1572

Name of the Vulnerable Software and Affected Versions Java Runtime Environment JRE versions 5.0 Update 27 and earlier Java Runtime Environment JRE versions 6 Update 23 and earlier Description The issue allows remote untrusted Java Web Start applications and untrusted Java applets to compromise...

CVE-2010-4468: Undefined Security Weakness

Unspecified vulnerability in the Java Runtime Environment JRE in Oracle Java SE and Java for Business 6 Update 23 and earlier, and 5.0 Update 27 and earlier, allows remote untrusted Java Web Start applications and untrusted Java applets to affect confidentiality and integrity via unknown vectors...

CVE-2010-3358

HenPlus JDBC SQL-Shell 0.9.7 places a zero-length directory name in the LDLIBRARYPATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory...

CVE-2010-3358

HenPlus JDBC SQL-Shell 0.9.7 places a zero-length directory name in the LDLIBRARYPATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory...

CVE-2010-3358

HenPlus JDBC SQL-Shell 0.9.7 places a zero-length directory name in the LDLIBRARYPATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory...

CVE-2010-3358

CVE-2010-3358 affects HenPlus JDBC SQL-Shell 0.9.7, where a zero-length directory name placed in LD_LIBRARY_PATH allows local users to escalate privileges via a Trojan horse shared library loaded from the current working directory. The issue is described across multiple feeds (Red Hat, SUSE, Ubun...

PT-2010-4762

Name of the Vulnerable Software and Affected Versions HenPlus JDBC SQL-Shell version 0.9.7 Description The issue allows local users to gain privileges via a Trojan horse shared library in the current working directory. This is due to HenPlus JDBC SQL-Shell placing a zero-length directory name in...