FineCMS v2.3.0一处xss，专业盲打管理员！

简要描述： 呵呵 详细说明： 本地测试！！ 在会员空间-图书-发布-书名处插入xss代码 返回我的空间查看下待审核的图书，弹窗了！ 用google浏览器登录后台也弹窗了 后台查看源码！ 漏洞证明： 求rank，前面漏洞求审核！！...

phpyun某功能对参数处理不严可导致sql注入

简要描述： 学习中......少装不努力，老大搞IT！！！ 详细说明： ｐｈｐｙｕｎ 个人会员中心 member/model/index.class.php $COOKIE"usertype";参数存在注入， 从下面代码中可以看到$data"usertype" 直接读取COOKIE的值，带入到sql中， sql未对值进行过滤处理 function msgaction if$GET"del" $nid=$this-obj-DBdeleteall"useridmsg","id='".$GET"del"."' and uid='".$this-uid."'";...

齐博官方后台存在弱口令问题（20多万会员信息危险）

简要描述： 后台弱口令 详细说明： http://www.qibosoft.com/admin28319635 http://bbs.qibosoft.com/admin.php 后台登陆地址 漏洞证明： Username:龙城 Password:020php168 没备份任何数据与没删除任何数据...

方维O2O城市生活服务平台后门任意文件上传漏洞（官网演示getshell）

简要描述： 用户好像不太多，但基本都有这个后门文件 详细说明： 后门文件路径 /esfile.php 官网介绍 http://www.fanwe.com/o2o 前台演示地址:http://o2o.fanwe.net/ 会员账号：fanwe 密码：fanwe http://o2o.fanwe.net/index.php?ctl=uccenter 分享处上传图片马 F12去掉尺寸，得到图片马地址 http://o2o.fanwe.net/public/comment/201404/17/10/1acafed8eeffa043489a4321b877e36690.jpg Getshell...

Concrete CMS: XSS IN member List (Because of City Textbox)

Proof: http://prntscr.com/348q0v 1st: go to your profile Edit your Address and City and put this code "...

[Blackhash] Audit Passwords Without Hashes

A traditional password audit typically involves extracting password hashes from systems and then sending those hashes to a third-party security auditor or an in-house security team. These security specialists have the knowledge and tools to effectively audit password hashes. They use password...

PHPMPS信息分类系统二次SQL注入1-5

简要描述： PHPMPS信息分类系统多处SQL注入 详细说明： 第1-3处SQL注入 二次注入，问题在会员中心，购买信息币是存在二次注入： member.php文件： case 'actgold': $type = $POST'type'; $number = $type == 'money2gold' ? intval$POST'mnumber' : intval$POST'cnumber'; if$number $userinfo'money' showmsg'您的资金不足以支付此次购买'; moneydiff$username, $money, $type; else...

hdwiki5.1储存型xss跨站漏洞

简要描述： hdwiki5.1储存型xss跨站漏洞 详细说明： 注册会员-编辑词条或者创建词条-编辑框选择源代码 可以利用在expression中插入注释比如：expr/XSS/ession 造成XSS漏洞 测试代码如下 ie 浏览器下有效 漏洞证明：...

GNUboard SQL Injection

========================== Advisory: GNUboard SQL Injection Vulnerability Author: [email protected] Affected Version: GNUboard5the latest version Vendor URL: http://sir.co.kr/ Vendor Status: UnfixedI know little about Korean，so i do not know how to describe this vul to the vendor...

destoon最新版本储存xss（有条件）

简要描述： 第一弹： 会员中心 供应管理处xss 详细说明： 花了一天时间研究了下destoon的xss问题 好了见正文 1：信息管理处的供应管理点发布 在产品品牌处写入xss测试代码 然后发布 2：来到后台审核供应点 3：审核通过 4：来到供应列表点击修改 见下图，可见产品品牌处的xss代码已经触发 5：成功打到cookie img src="https://images.seebug.org/upload/201403/1019170134779b5304664b0f6f...

UBUNTU-CVE-2014-1446

The yamioctl function in drivers/net/hamradio/yam.c in the Linux kernel before 3.12.8 does not initialize a certain structure member, which allows local users to obtain sensitive information from kernel memory by leveraging the CAPNETADMIN capability for an SIOCYAMGCFG ioctl call...

PHPYUN逻辑错误无限刷积分

简要描述： PHPYUN逻辑错误无限积分所以标题党了一下！ 详细说明： 逻辑错误 未对用户输入严格过滤！ 问题发生在 member/model/com.class.php 1158行 $integral=$this-config"integralcomcomments"$POST'time'; ..... if$statis"integral"obj-ACTmsg"index.php?C=pay","你的".$this-config"integralpricename"."不足，请先充值";...

V5shop旗下V5Mall多用户商城存在SQL注入漏洞

简要描述： @V5shop 这次应该不会出差去了吧！ 详细说明： 测试的漏洞站点：http://tdemo002mp.v5portal.com/ 漏洞页面：http://tdemo002mp.v5portal.com/member/groupbuy.ashx?id=1 简单的加个’ 上sqlmap跑下 漏洞证明： available databases 196: 021web.com.cn baby1v5shopcomcn batteryface.com book1v5shopcomcn Books boon365.v5shop.com.cn chinee.cn...

Destoon /module/member/record.inc.php SQL注入

No description provided by source...

phpcms v9会员中心文件上传漏洞

No description provided by source...

[ipset_list] ipset set listing wrapper script

Features: Calculate sum of set members and match on that count. List only members of a specified set. Choose a delimiter character for separating members. Show only sets containing a specific glob matching header. Arithmetic comparison on headers with an integer value. Match members using a...

Metinfo 5.1 /member/getpassword.php SQL注入漏洞

No description provided by source...

Cheng's dance CMSPHP3. 0 stored xss getshell-a vulnerability warning-the black bar safety net

This cms before 9 0 someone made a getshell,when is background verification file problem The official website has been patched, so again, source Because the backend login will also need the authentication code so the injection didn't see. There xss Vulnerability file user/member/skinedit.php trtd...

DEDECMS website management system template execution vulnerability-vulnerability warning-the black bar safety net

DEDECMS website management system template execution vulnerability One not careful, your server will be hacked, such as database password is too simple, the server password is too simple, or CMS system vulnerabilities. The following is a DEDE of the template execution vulnerability. Vulnerability...

libipa_hbac, sssd security update

CentOS Errata and Security Advisory CESA-2013:1319 Updated sssd packages that fix one security issue and several bugs are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having low security impact. A Common Vulnerability Scoring System CVS...