PT-2022-26358 · Veritas · Netbackup

Name of the Vulnerable Software and Affected Versions: Veritas NetBackup versions prior to 10.0 Description: A second-order SQL Injection attack can be leveraged against the NBFSMCLIENT service of the NetBackup Primary server. Recommendations: For versions prior to 10.0, update to version 10.0 or...

SuiteCRM Bean Operation Vulnerability

SuiteCRM is a free and open source customer relationship management application. SuiteCRM has a bean manipulation vulnerability. The vulnerability is due to the "HealEngutsRe::ActhOnthAvieHTMLField" method which allows the creation of new beans or modification of fields of arbitrary beans. An...

PageAdmin CMS最新版二次注入

简要描述： 发现PageAdmin官网更新了版本，就去复查了一下，然后发现厂商的修复手段等于没修复！ http://www.pageadmin.net/soft/ 选择本地下载最新版，PageAdmin V3.0.20151204最后更新时间:2016-03-11 Demo站换了后台地址，这次仅在本地复现。 详细说明： 0 之前的漏洞是这个 http://.../bugs/wooyun-2016-0177673 1 依旧是/e/master/buildstatic.aspx 这个页面 原来的代码是这样的： ifIsNumIds sql="select...

ZenPhoto 1.4.8 - Multiple Vulnerabilities

ZenPhoto version 1.4.8 suffers from cross site scripting, remote SQL injection, and path traversal vulnerabilities. Vulnerability: SQL Injection, Reflected XSS, Path Traversal Affected Software: ZenPhoto http://www.zenphoto.org/ Affected Version: 1.4.8 probably also prior versions Patched Version...

74CMS一逻辑漏洞导致两处二次注入

简要描述： 74CMS一逻辑漏洞导致两处二次注入 详细说明： 1.首先还是注册一个企业用户，在注册的过程中用burp抓包，修改里面的username字段 username=1′,1,1001,1,user,1,1,1,1,1,1,1 — a 2.74cms本来是不允许注册带有特殊字符的用户名的，但是使用这样的方法可以绕过过滤，我们来看一下数据库。 3.我们再来看哪里对该用户进行了二次数据库操作。找了很久，看到了对很多操作都提供了日志记录的功能。writememberslog函数 function...

74cms(20141027)多处二次注入

简要描述： 看完了xfkxfk大神的 http://wooyun.org/bugs/wooyun-2010-070827 http://wooyun.org/bugs/wooyun-2014-070858 对74cms尝试了下，果然有收货。 详细说明： 1. user/company/companyajax.php elseif$act=="promotionaddsave" reportdeal$uid,2,$points; $userpoints=getuserpoints$uid;...

Simple e-Document 1.31 SQL Injection / XSS / CSRF / File Upload

+Exploit: Simple e-document v1.31 = Sql inj,Login Bypass,XSS,Insecure Cookie Handlingprivilege escalation,Arbitrary File Upload, Second order injections, CSRF ,Insecure logout process + Author: PuN!Sh3r + Contact: http://anti-armenia.org + version: Simple e-document v1.31 + Vendor Homepage:...