163 matches found
SQL Injection Vulnerability in ourphp v1.7.2 search.php Page
OURPHP is a PHP+MySQL based development of W3C standard building system. A SQL injection vulnerability exists in ourphp v1.7.2 search.php page. The root cause of the vulnerability is due to the program failing to filter user input. An attacker can exploit this vulnerability to obtain sensitive...
OurPHP stored xss
No description provided by source...
Stored XSS Vulnerability in OurPHP
OurPHP is a web content management system developed using the PHP language. A stored XSS vulnerability exists in OurPHP version V1.7.1, which can be exploited to insert cross-site code in the member center and obtain sensitive information from the administrator cookie...
OurPHP the latest version stored xss
No description provided by source...
ourphp OP_Addname parameter has sql injection vulnerability
OurPHP 傲派建站系统 is a website content management system developed using PHP language, the developer is Harbin Weicheng Technology Co. The ourphp OPAddname parameter suffers from a sql injection vulnerability, which can be exploited to obtain sensitive data due to a lack of filtering of the parameter...
OurPHP administrator backend has arbitrary file operation vulnerability
OurPHP 傲派建站系统 is a website content management system developed using PHP language, the developer is Harbin Weicheng Technology Co. OurPHP version 1.7.1 suffers from an arbitrary file manipulation vulnerability that allows an attacker to manipulate any php file without logging in, resulting in...
OurPHP 网站功能管理SQL注入漏洞
No description provided by source...
OurPHP Backend Web Feature Management SQL Injection Vulnerability
OurPHP 傲派建站系统 is a website content management system developed using PHP language, the developer is Harbin Weicheng Technology Co. OurPHP OurPHP management background global column under the website function management module in the configuration of saving the anti-injection processing of the pag...
OurPHP Profile Modification Function SQL Injection Vulnerability
OurPHP 傲派建站系统 is a website content management system developed using PHP language, the developer is Harbin Weicheng Technology Co. The registered members of OurPHP OurPHP website builder system do not have anti-injection processing for the hidden form password when modifying their information...
OurPHP 后台任意文件上传漏洞
No description provided by source...
Request Forgery Vulnerability in OurPHP Server Side
OurPHP 傲派建站系统 is a website content management system developed using PHP language, the developer is Harbin Weicheng Technology Co. The upload file management module under the "Global/Interface" module in the administration background of OurPHP has a hidden remote file download function. Since the...
OurPHP backend has an arbitrary file upload vulnerability
OurPHP 傲派建站系统 is a website content management system developed using PHP language, the developer is Harbin Weicheng Technology Co. The upload file management module under the "Global/Interface" module in the administration background of OurPHP has the function of uploading hidden files. Since the...
ourphp v1.1.0设计缺陷导致sql注入漏洞
No description provided by source...
Ourphp CMS 评论处 SQL注入漏洞
No description provided by source...
ourphp 1.5.0 /function/ourphp_shoppingorders.class.php 参数id绕过过滤SQL注入漏洞
No description provided by source...
ourphp 1.5.0 /function/plugs/Comment/product-content.php 参数row SQL盲注漏洞
No description provided by source...
ourphp 1.5.2 /function/ourphp_shoppingorders.class.php 参数id 绕过过滤SQL注入漏洞
No description provided by source...
ourphp 1.5.0 OP_Useremail SQL二次注入漏洞
No description provided by source...