693 matches found
MetInfo 5.3.1 存在变量覆盖漏洞(可重置管理员账号密码)
No description provided by source...
MetInfo Cross-Site Scripting Vulnerability
MetInfo is an enterprise website management system with PHP Mysql architecture. MetInfo suffers from a cross-site scripting vulnerability. Allow attackers to insert malicious code, obtain user cookies, etc...
MetInfo 5.1.7 job.php SQL盲注
No description provided by source...
MetInfo File Upload Vulnerability
MetInfo is an enterprise website management system with PHP Mysql architecture. MetInfo has a file upload vulnerability that can be exploited by remote attackers to upload arbitrary files and obtain server control privileges...
MetInfo v5.3.1 global.func.php SQL注入
No description provided by source...
MetInfo 5.1.7 about/index.php 任意文件包含漏洞可getshell
No description provided by source...
Reflected Cross-Site Scripting Vulnerability in MetInfo Version 5.3.3
MetInfo is an enterprise website management system with PHP Mysql architecture. A reflective cross-site scripting vulnerability exists in MetInfo version 5.3.3. An attacker can exploit the vulnerability to conduct cross-site scripting attacks. The vulnerability exists in the following pages:...
MetInfo 5.3 \message\message.php 存储型 XSS 漏洞
MetInfo5.3,从官网下的最新安装包之后，在自己的服务器上面搭建之后正式开始测试 首先来看问题页面 MetInfo5.3\message\message.php 这个文件里面 php if!$Captcha-CheckCode$code echo" alert'$langmembercode'; window.history.back;"; exit; 该段代码里面去除了SCRIPT关键字，所以当我们直接提交的时候 用户提交那块会直接清空，管理员则是去除关键字 现在我们触发该存储XSS 测试过程： alert'test' 我们将该测试xss进行编码 编码方式为HTML实体（DEC）...
Metinfo 5.3.1 /login_check.php 注入漏洞
No description provided by source...
MetInfo 5.3 listmod.php SQL注入漏洞
No description provided by source...
Metinfo 5.2 /search/search.php SQL 注入
漏洞文件:/search/search.php else $module=intval$module; if$class1$module=0; ifintval$module $serchsql.=" where lang='$lang' and recycle='0' or recycle='-1' and displaytype='1' "; else $class1info=$classlist$class1; if!$class1infookinfo'../',$pagelangnoid; $class1sql=" class1='$class1' "; $class2sql="...
MetInfo 5.3 /include/global/listmod.php SQL注入
看到 MetInfo5.3/include/global/listmod.php 164-184行 foreach as ==paraprice.id;=$;vardump;ifif!strstr, -pregmatch/0-9.+/,,; 看到 MetInfo5.3/include/global/listmod.php 164-184行 foreach as = ="paraprice".'id'; =$; vardump; if if!strstr, "-" pregmatch'/0-9.+/',,; =0; .= " and existsselect from where...
MetInfo latest version of the arbitrary file read vulnerability warning-the black bar safety net
An attacker by submitting a carefully constructed parameters can get the server end of any file content! MetInfo 5.2 which is the current latest version include/thumb.php file originally used to get the thumbnail, but its structure is the thumbnail path to the presence of an external controlled...
MetInfo 5.2 /admin/include/common.inc.php 代码执行漏洞
/admin/include/common.inc.phpif!isarray$metlangadmin$GETlangset&&$GETlangset!=''die'not have this language'; if$GETlangset!='' $GETlangset=daddslashes$GETlangset,0,1; changemetcookie'languser',$GETlangset; savemetcookie; $M'user''cookie' = $metcookie; $metinfoadminname =...
Metinfo v5.2 /include/thumb.php 信息泄露漏洞
No description provided by source...
Metinfo V5.2 /job/job.php SQL注入漏洞
该问题出现在/job/job.php中，对于全局变量$mobilesql审查没有进行过滤和转义，导致该全局变量可以被覆盖，导致SQL注入的发生，下面来看看漏形成的原因。 首先全局变量被定义在methtml.inc.php中，在job.php的require方法中可以看到。 requireonce '../public/php/methtml.inc.php'; 在methtml.inc.php中可以看到对全局变量的定义，第723行的methtmlgetarray方法中 global...
Metinfo File Inclusion Vulnerability
MetInfo is an enterprise website management system with PHP Mysql architecture. A file inclusion vulnerability exists in the MetInfo system. An attacker can exploit this vulnerability to execute arbitrary php code...
MetInfo 3.0 PHP Code Injection Vulnerability
No description provided by source...