73 matches found
File Upload Vulnerability in Qibo CMS System
Qibo CMS system is a content management system under Guangzhou Qibo Network Technology Co. There is a file upload vulnerability in the Qibo CMS system that can be exploited by attackers to gain control of the web server...
SQL injection vulnerability in the background of Qibo CMS V7.0 system
Qibo CMS station system is a Guangzhou Qibo Network Technology Co. Qibo CMS system V7.0 backend SQL injection vulnerability exists. Attackers can use the vulnerability to obtain sensitive information...
Qibo CMS station system V7.0 backend file reading vulnerability
Qibo CMS station system is a Guangzhou Qibo Network Technology Co. Qibo CMS system V7.0 backend file reading vulnerability exists. The vulnerability is due to the failure of the user to submit a special string of processing , resulting in directory traversal , an attacker can use the vulnerabilit...
SQL Injection Vulnerability in Qibo CMS V7.0 Background
Qibo CMS station system is a Guangzhou Qibo Network Technology Co. Qibo CMS V7.0 SQL injection vulnerability exists in the background. Attackers can use the vulnerability to obtain sensitive information in the database...
Qibo B2B E-commerce System Stored Cross-site Scripting Vulnerability
Qibo B2B e-commerce system is based on PHP programs and Mysql database-based open source B2B industry portal e-commerce website builder . Qibo B2B e-commerce system stored cross-site scripting vulnerabilities. Attackers can insert malicious js code in the page to obtain user cookies and other...
Qibo CMS whole site system exists arbitrary file deletion vulnerability
Qibo CMS station system is a Guangzhou Qibo Network Technology Co. Qibo CMS whole site system there are arbitrary file deletion vulnerability, an attacker can exploit the vulnerability to delete arbitrary files...
Command Execution Vulnerability in Qibo CMS System
Qibo CMS system is one of the country's leading open source content management system, with the original visualization of the technical advantages of the label, so that the management and maintenance of the page and style of the production of the threshold is reduced to a minimum degree. Qibo CMS...
Cross-site Scripting Vulnerability in Qibo Website Building System v7.0
Qibo CMS is a multifunctional modular website management system that combines articles, downloads, pictures, classifieds, videos, shopping malls, music, blogs, talents, Q&A and other modules. Qibo CMS v7.0 suffers from a cross-site scripting vulnerability, which is caused by the system not...
Cross-site Scripting Vulnerability in Qibo CMS Frontend
Qibo CMS is a multifunctional modular website management system that combines articles, downloads, pictures, classifieds, videos, shopping malls, music, blogs, talents, Q&A and other modules. A cross-site scripting vulnerability exists in the front-end of Qibo CMS, where an attacker can construct...
Reflected Cross-Site Scripting Vulnerability in 'keyword' Parameter of Qibo B2B Commerce System
Qibo B2B business system is an open source content management system . Qibo B2B Commerce System 'keyword' parameter reflects cross-site scripting vulnerability. Allows attackers to insert XSS execution code into web forms, there are phishing attacks, user cookie theft and other security risks...
Reflected Cross-Site Scripting Vulnerability in 'keyword' Parameter of Qibo Classifieds Information System
Zibo classification information system is an open source content management system. Qibo Classifieds Information System 'keyword' parameter has a reflective cross-site scripting vulnerability that allows an attacker to insert XSS execution code into a web form, which poses a security risk of...
Qibo CMS whole site system V7.0 exists overstepping access vulnerability
Zibo CMS system is an open source content management system. Qibo CMS whole site system V7.0 suffers from an override access vulnerability. By modifying the UID parameter value, the attacker can traverse the sensitive information of other users, constituting information leakage...
Global Reflective XSS Vulnerability in Qibo News Media System
Qibo news media system is Qibo software company using PHP language developed specifically for the news station and launched a web content management system to provide from the content release, organization, dissemination, interaction and data mining media site integration solutions. Qibo News Med...
齐博视频系统 video/member/special.php SQL注入漏洞
0x01漏洞简介 齐博视频系统在文件/video/member/special.php处$TBpre未初始化，由于qibo存在伪全局变量注册，所以造成了sql注入。 0x02漏洞详情 video/member/special.php elseif$job=="showBBSiframe" $rsdb=$db-getone"SELECT FROM $prespecial WHERE uid='$lfjuid' AND id='$id'"; if!$rsdb showerr"资料不存在",1; //专题内的贴子排序 if$act=="order" unset$array; foreach...
SQL Injection Vulnerability in Qibo Blog System
Zibo Blog System is a multi-user blog system. There is a SQL injection leak in the Qibo Blog System. The SQL injection vulnerability is caused due to uninitialized $TBpre in the '/blog/template/space/file/listbbs.php' function, which is registered according to a pseudo-global variable in the Qibo...
Qibo Blog /member/userinfo.php SQL注入漏洞
No description provided by source...
Qibo Blog 1.0 /blog/require/ajax/ol_module.php 本地文件包含漏洞
/blog/require/ajax/olmodule.phpif$step==2 $uid=$lfjuid; @include"template/space/module/$moduleid.php"; /ÐÂÔö¼ÓµÄÄ£¿éʹ֮¿ÉÒÔÍÏÀ/ //$ThisModule$moduleid=strreplace'class="head"','class="head" onMouseOver="Drag.inint;"',$ThisModule$moduleid; if!$ThisModule$moduleid...
齐博cms所有产品发现后门
简要描述： 在另一个地方又发现后门了，敢不放后门吗？ 还有，压缩包下载下来的时候，360直接报有phpshell，360都看不下去了 = = 详细说明： 齐博cms整站系统 后门文件 ../hack/upgrade/admin.php CRC32 28510105 以及剩下的存在于博客系统 下载系统 考试系统 黄页系统 新闻媒体系统 图片系统 视频系统 知道系统 企业系统 B2B系统 等等（反正官网所有的下载包里都有这个后门）文件在 ../hack/upgrade/admin.php CRC32 5101A2EE...