WordPress Plugin Nmedia WordPress Member Conversation 1.35.0 - doupload.php Arbitrary File Upload

WordPress Plugin Nmedia WordPress Member Conversation 1.35.0 - doupload.php Arbitrary File Upload source: https://www.securityfocus.com/bid/53790/info The Nmedia WordPress Member Conversation plug-in for WordPress is prone to a vulnerability that lets attackers upload arbitrary files. The issue...

WordPress N-Media Member Conversation Plugin - Arbitrary File Upload

WordPress N-Media Member Conversation plugin's "doubpload.php" is prone to an arbitrary file upload vulnerability. It allows an attacker to upload arbitrary files to the affected computer. Other attacks are also possible. Solution Update the plugin...

WordPress Plugin Nmedia WordPress Member Conversation 1.35.0 - 'doupload.php' Arbitrary File Upload

source: https://www.securityfocus.com/bid/53790/info The Nmedia WordPress Member Conversation plug-in for WordPress is prone to a vulnerability that lets attackers upload arbitrary files. The issue occurs because the application fails to adequately sanitize user-supplied input. An attacker can...

PHPMyWind一个为所欲为的注入

简要描述： rt 详细说明： PHPMyWind最新版 只需会员登录 即可进行任意sql操作 漏洞代码: /member.php 861-941行 else if$a == 'perfect' //初始化参数 $username = empty$username ? '' : $username; $password = empty$password ? '' : md5md5$password; $repassword = empty$repassword ? '' : md5md5$repassword; $email = empty$email ? '' : $email;...

FineCMS v2.3.5 /member/index.php SQL注入漏洞

No description provided by source...

HackerOne: Email Notification should be get while changing Paypal Email

an email notification should be get while changing paypal email address when we use hackerone a/c in any team there many people in team member so when we change paypal email an email notification should be get...

YXcms1.2.8两处任意文件删除可reinstall

简要描述： 1.2.8 详细说明： 一处没有过滤，一处过滤失误 第一处：/protected/apps/member/controller/inforController.php public function index $auth=$this-auth; $id=$auth'id'; if!$this-isPost $info=model'members'-find"id='$id'"; $this-info=$info; $this-path=ROOT.'https://images.seebug.org/upload/member/image/';...

IP. Board <= 3.4.7 SQL Injection analysis-vulnerability warning-the black bar safety net

IPB stands for Invision Power Board is a PHP Development Forum program, foreign used more widely. In its 3. 4. 7 version and the previous presence of a SQL injection vulnerability, this article to its analysis. poc link http://seclists.org/fulldisclosure/2014/Nov/20 !/ usr/bin/env python Sunday,...

PHPCMS V9 /phpcms/modules/vote/index.php 代码执行漏洞

漏洞影响版本：phpcms v9.5.8漏洞分析：hpsso/index.php文件所有的操作都存在严重的注入问题，这个类文件的构造函数最先调用它的父构造函数，通过authkey来解析POST传入的data内容，解析后data中的内容会作为注册、登陆、删除用户等操作的内容依据，而这些操作都会将这些数据作为数据库查询语句使用。这个问题其实在XXX的《PHPCMS V9...

QiboCMS v7 /member/comment.php SQL注入漏洞

No description provided by source...

SS-2016-011: ChangePasswordForm does not check Member::canLogIn()

More info at https://www.silverstripe.org/download/security-releases/ss-2016-011/...

精讯cms sql注入 和 任意刷钱和积分漏洞

简要描述： 精讯cms sql注入 和 任意刷钱和积分漏洞 详细说明： public function reg if $this - obj - isLogin $go = $this - referer && !strstr$this - referer, 'login'?$this - referer:Url :: getUrl'member'; $this - showMsgL'ALREADYISMEMBER', $go; if $this - isSubmit if $this - obj - reg $this - obj - login$POST'info''username...

WordPress Ultimate Member Plugin <= 1.0.78 - Multiple Vulnerabilities

Because of multiple vulnerabilities in this plugin, attackers can delete any file or upload arbitrary files. Solution Update the plugin...

Ultimate Member <= 1.0.78 - Multiple Vulnerabilities

Ultimate Member Plugin version 1.0.78 has several security vulnerabilities that allow unauthenticated users to delete and upload files, which can ultimately lead to remote code execution...

QiboCMS v7 /member/comment.php SQL注入漏洞

No description provided by source...

Foxit Products GIF Conversion - 'DataSubBlock' Memory Corruption

Application: Foxit Products GIF Conversion Memory Corruption Vulnerabilities DataSubBlock Platforms: Windows Versions: The vulnerability is confirmed in version Foxit Reader 7.x. Other versions may also be affected. Secunia: SA63346 PRL: 2015-02 Author: Francis Provencher Protek Research Lab’s...

SDCMS 最新门户版 V3.0 储存型xss一枚 可盲打后台

简要描述： 严谨的说 是编辑器xss储存型漏洞 详细说明： 虚拟主机搭建测试： 需要条件： 开启会员注册默认开启 开启投稿功能（默认开启） 下载地址： http://www.sdcms.cn/product/portal.html 默认 开启会员注册 无需审核 原本想在demo上测试的 但是他开启审核了 ---------------------------------------- 注册个会员 找到在线投稿 选择文章模型 远程上传地址处 插入： " 提交 img...

嘉缘人才系统sql注入#3

简要描述： 求20rank 详细说明： 首先看到frcms\member\requireslist.php if$do=="savedata" if$POST'id'=="" $POST'sid'=intval$Memberid; $POST'member'=getcookie'userlogin'; $POST'school'=getcookie'username'; ifempty$POST'title' showmsg'标题不能为空！','-1';exit; $POST'adddate'=date'Y-m-d H:i:s';...

HackerOne: Auto Approval of Invitation to join Team as a Team member

Hi Hackerone, I have found a vulnerability wherein once a Team manager of any team sends out an Invitation to another Hackerone user to join his team, the invited team member gets auto accepted into the team to which he is being invited to join. The choice of "Accept" or "Reject" invitation which...

[SECURITY] [DLA 160-1] sudo security update

Package : sudo Version : 1.7.4p4-2.squeeze.5 CVE ID : CVE-2014-0106 CVE-2014-9680 Debian Bug : 772707 This update fixes the CVEs described below. CVE-2014-0106 Todd C. Miller reported that if the envreset option is disabled in the sudoers file, the envdelete option is not correctly applied to...