清大新洋图书馆书目检索系统通用SQL注入漏洞#2

简要描述： 通用SQL注入漏洞2 清大新洋官网：http://www.infosea.com.cn 详细说明： 图书馆书目检索系统 注入点：/opac/dzjgjsjg.jsp POSTqsrq=&jsrq=&ssxx= 漏洞证明： 通用漏洞，下面给出多个案例进行证明： 案例①：http://...:8089/opac/dzjgjsjg.jsp 案例②：.../opac/dzjgjsjg.jsp 案例③：...:8088/opac/dzjgjsjg.jsp 案例④：...:8088/opac/dzjgjsjg.jsp 案例⑤：...:8089/opac/dzjgjsjg.jsp img...

某图书系统通用注入一枚

简要描述： RT 详细说明： http://www.infosea.com.cn/yonghu.html 北京清大新洋科技有限公司 注入文件：opac/jszjl.jsp?wxlx= 延时注入 测试案例： http://125.223.252.12:8089/opac/jszjl.jsp?wxlx=zwqk&jstj=km&jsc=3 http://210.45.183.219/opac/jszjl.jsp?wxlx=zwqk&jstj=km&jsc=3 http://lib.tongde.com:8089/opac/jszjl.jsp?wxlx=zwqk&jstj=km&jsc=3...

某图书系统通用注入一枚

简要描述： RT 详细说明： http://www.infosea.com.cn/yonghu.html 北京清大新洋科技有限公司 注入文件：opac/ckmarc.jsp?kzh= 测试案例： http://61.187.55.41:8090/opac/ckmarc.jsp?kzh=zyk0347383 http://tsjs.sdwm.cn:8000/opac/ckmarc.jsp?kzh=zyk0043454 http://60.171.185.69:8089/opac/ckmarc.jsp?kzh=zyk0046921...

Evergreen Information Disclosure Vulnerability (CNVD-2015-01581)

Evergreen is an open source, highly scalable library system ILS developed by the Evergreen community. The system helps patrons find library materials and helps with library management, organizing catalogs, and distributing those materials, among other things. An information disclosure vulnerabili...

Evergreen Information Disclosure Vulnerability

Evergreen is an open source, highly scalable library system ILS developed by the Evergreen community. The system helps patrons find library materials and helps with library management, organizing catalogs, and distributing those materials, among other things. Evergreen suffers from an information...

SQL Injection Vulnerability in the Library System of Beijing Qingda Xinyang Technology Co.

The library system of Beijing Qingda Xinyang Technology Co., Ltd. is a set of library comprehensive business management network platform under the open Web platform using object-oriented programming technology, advanced technology, easy to share resources and remote maintenance. Beijing Tsinghua...

PALS Library System WebPALS 1.0 pals-cgi Traversal Arbitrary File Read

No description provided by source. source: http://www.securityfocus.com/bid/2372/info A specially crafted URL composed of a known filename, will disclose the requested file residing on a machine running WebPALS. This vulnerability will also allow an attacker to execute arbitrary code with root...

PALS Library System WebPALS 1.0 pals-cgi Arbitrary Command Execution

No description provided by source. source: http://www.securityfocus.com/bid/2372/info A specially crafted URL composed of a known filename, will disclose the requested file residing on a machine running WebPALS. This vulnerability will also allow an attacker to execute arbitrary code with root...

Vastal I-Tech Mag Zone - cat_id SQL Injection

Vastal I-Tech Mag Zone - catid SQL Injection Vastal I-Tech Mag Zone SQL Injection Vulnerability Author : Stack Script Home Page : http://www.vastal.com/mag-zone-online-library-system.html Demo : http://www.vastal.com/mag/ the exploit fate the password use ur mind for have the column username...

Vastal I-Tech Mag Zone - 'cat_id' SQL Injection

Vastal I-Tech Mag Zone SQL Injection Vulnerability Author : Stack Script Home Page : http://www.vastal.com/mag-zone-online-library-system.html Demo : http://www.vastal.com/mag/ the exploit fate the password use ur mind for have the column username Exploit:...

Vastal I-Tech Mag Zone (cat_id) SQL Injection Vulnerability

No description provided by source. Vastal I-Tech Mag Zone SQL Injection Vulnerability Author : Stack Script Home Page : http://www.vastal.com/mag-zone-online-library-system.html Demo : http://www.vastal.com/mag/ the exploit fate the password use ur mind for have the column username Exploit:...

[Full-disclosure] OpenBiblio 0.5.2-pre4 and prior multiple vulnerabilities

Security Advisory - - OpenBiblio 0.5.2-pre4 and prior multiple vulnerabilities - ---------------------------------------------------- Product: OpenBiblio Version: Version 0.5.2 Prerelease 4 and prior is affected Url: http://obiblio.sourceforge.net/ Affected by: Full path disclosure, local file...

CVE-2001-0217

Directory traversal vulnerability in PALS Library System pals-cgi program allows remote attackers to read arbitrary files via a .. dot dot in the documentName parameter...

CVE-2001-0216

PALS Library System pals-cgi program allows remote attackers to execute arbitrary commands via shell metacharacters in the documentName parameter...

CVE-2001-0216

The CVE-2001-0216 issue affects the PALS Library System pals-cgi program. The vulnerability arises from shell metacharacters in the documentName parameter, enabling remote attackers to execute arbitrary commands via the CGI. NVD data indicates a NETWORK attack vector with LOW complexity and no au...

CVE-2001-0216

PALS Library System pals-cgi program allows remote attackers to execute arbitrary commands via shell metacharacters in the documentName parameter...

CVE-2001-0217

The connected Nessus source (PALS Library System WebPALS pals-cgi Multiple Vulnerabilities) confirms a directory traversal flaw in the pals-cgi CGI of the PALS Library System. The vulnerability allows an attacker to read arbitrary files via the .. sequence in the documentName parameter, with the ...

CVE-2001-0217

Directory traversal vulnerability in PALS Library System pals-cgi program allows remote attackers to read arbitrary files via a .. dot dot in the documentName parameter...

PALS Library System "show files" Vulnerability and remote command execution

Name: PALS Library System "show files" Vulnerability and remote command executiom. Date: 02.02.2001 About: This script is derived from an idea originated at St.Olaf College to provide a www interface to the PALS Library System. This idea was then worked on at Georgia State University. This versio...

PALS Library System WebPALS pals-cgi Multiple Vulnerabilities

The 'pals-cgi' CGI is installed. This CGI has a well known security flaw that lets an attacker read arbitrary files with the privileges of the http daemon usually root or nobody. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc';...