403 matches found
Stored Cross-Site Scripting Vulnerability in Home Portal System
Home portal system is for the home furnishing industry to develop a set of decoration website PHP source code system. A stored cross-site scripting vulnerability exists in the Home Portal System. An attacker can insert malicious js code into the page to obtain user cookies and other information,...
S-CMS News Portal System SQL Injection Vulnerability in Frontend ne***/fo***.php Page
S-CMS news portal system is Zibo Shining Network Technology Co., Ltd. developed a specialized enterprise to provide solutions to build a station. A SQL injection vulnerability exists in the front-end ne/fo.php page of the S-CMS news portal system. An attacker can exploit the vulnerability to obta...
S-CMS News Portal System SQL Injection Vulnerability in Frontend
S-CMS news portal system is Zibo Shining Network Technology Co., Ltd. developed a specialized enterprise to provide solutions to build a station. A SQL injection vulnerability exists in the frontend of S-CMS News Portal System. Attackers can use the vulnerability to obtain sensitive information i...
CVE-2018-10122
QingDao Nature Easy Soft Chanzhi Enterprise Portal System aka chanzhieps pro1.6 allows remote attackers to read arbitrary files via directory traversal sequences in the pathname parameter to www/file.php...
CVE-2018-10122
QingDao Nature Easy Soft Chanzhi Enterprise Portal System aka chanzhieps pro1.6 allows remote attackers to read arbitrary files via directory traversal sequences in the pathname parameter to www/file.php...
Directory traversal
QingDao Nature Easy Soft Chanzhi Enterprise Portal System aka chanzhieps pro1.6 allows remote attackers to read arbitrary files via directory traversal sequences in the pathname parameter to www/file.php...
CVE-2018-10122
The CVE-2018-10122 entry concerns QingDao Nature Easy Soft Chanzhi Enterprise Portal System (pro1.6). Affected component is the file.php pathname handling, where directory traversal sequences allow remote attackers to read arbitrary files. This is a remote file disclosure vulnerability with CVSS ...
CVE-2018-10122
QingDao Nature Easy Soft Chanzhi Enterprise Portal System aka chanzhieps pro1.6 allows remote attackers to read arbitrary files via directory traversal sequences in the pathname parameter to www/file.php...
SQL Injection Vulnerability in 08cms
08CMS Automotive Portal System is a solution for automotive portals, based on PHP+MYSQL development, super static page deployment, template and program separation, scalable architecture, open-type code, unlimited support for deep secondary development. SQL injection vulnerability exists in 08cms...
Arbitrary Code Execution Vulnerability in 08cms Automotive System
08CMS Automotive Portal System is an automotive portal solution based on PHP+MYSQL development, super static page deployment, template and program separation, extensible architecture, open code, unlimited support for in-depth secondary development. 08cms Automotive System has an arbitrary code...
Arbitrary File Upload Vulnerability in New Harvest Technology Creative Portal Information Management System
Creative Portal Management System is a creative information publishing platform applied in the construction of New Harvest Technology. The New Harvest Technology Creative Portal Information Management System has an arbitrary file upload vulnerability that allows attackers to exploit the...
163K家居装修门户系统文件上传漏洞
No description provided by source...
Data 地方门户系统 /ashx/GetPage.ashx 任意文件读取漏洞
No description provided by source...
用友多个系统通用漏洞导致接口信息泄露引发多数据库信息泄露（涉及多个大型厂商）
简要描述： 详细说明： 通过webservice接口泄露,涉及多个系统 一、NC系统 http://123.232.105.202/ http://erp.suning.com.cn/ http://115.238.57.245/ 以苏宁为例。 接口地址:http://erp.suning.com.cn/uapws/service 会发现很多接口,以数据库内网链接泄露为例太多接口了,不一一测试了 得到数据库内网链接为:http://erp.suning.com.cn/uapws/service/nc.itf.ses.inittool.PortalSESInitToolService?ws...
齐博地方门户系统sql注入
简要描述： 变量未初始化导致注入 详细说明： 齐博地方门户系统 齐博的全局过滤系统中由于存在如下代码，导致传入的参数可以成为全局变量 foreach$COOKIE AS $key=$value unset$$key; foreach$POST AS $key=$value !ereg"^\A-Z+",$key && $$key=$POST$key; foreach$GET AS $key=$value !ereg"^\A-Z+",$key && $$key=$GET$key; 所以系统中如果存在未初始化的变量，容易导致注入 2shou/post.php中 180行...
PHP Nuke 5.x Error Message Web Root Disclosure Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/4333/info PHP-Nuke is a popular web based Portal system. It allows users to create accounts and contribute content to the site. A vulnerability has been reported in some versions of PHP-Nuke. Reportedly, a maliciously...
Small ants local portal system sql injection and XSS-vulnerability warning-the black bar safety net
SQL injection: the http://demo.xiaomayi.co/public/ajax.aspx?action=addcomparebuild&cname=a'and%20dbname%3E0-- demoxiaomayico http://demo.xiaomayi.co/public/ajax.aspx?action=addcomparebuild&cname=a'and select top 1 name from demoxiaomayico. dbo. sysobjects where xtype=CHAR8 50--...
BlueCMS - PHP local portal system 0day large collection of-vulnerability warning-the black bar safety net
Bluecms is from a company tutorial to see the cms, and then thought, since there, used to do tutorials, I'll dig this set of cms vulnerabilities, I did not dig deep end, also failed to adhere to the code to see finished. It has been found that a lot of problems. Can actually get a shell on it. !...
SDCMS 1. 1sp1 the XSS vulnerability of the mining and use-vulnerability and early warning-the black bar safety net
SDCMS 1. 1sp1XSSthe vulnerability of the mining and use of SDCMS name: era website Information Management System. SDCMS is based on ASP+ACCESS/MSSQL website Information Management System. Permanently free, open source! SDCMS to information as the theme, through text and image title as a starting...
ARASTAR Portal System Cross Site Scripting
ARASTAR Portal System search.php XSS Vulnerability Software : ARASTAR Date : 1/13/2012 Vendor : http://www.ara-star.com Get App. : http://www.ara-star.com/sale.php?sale=3 Price : $480 Dork : site:.il intext:"powered by ARASTAR" Author : ITTIHACK Home : http://ittihack.com Vulnerable File :...