1246 matches found
Comment matter Wordpress plugin persistent XSS and Key remote arbitrary tampering-bug warning-the black bar safety net
xss /wp-content/plugins/pinglunla/relay. php? sid=ec51555f3e5e125257457a73609bdbe15cb7c29d"/scriptscriptalert0/scriptscript%20src=" The above URL for tampering with comments. SID, while injecting any script, the script will be saved permanently, affecting all of the open comments feature of the...
admin/fixcwdmemberships.jsp lacks an XSRF token to run the repair action.
admin/fixcwdmemberships.jsp does not require a csrf token to run the repair action. When fixing this issue, please ensure that the JSP is converted to an action or deleted - we don't want to have to maintain our XSRF infrastructure in JSPs...
admin/fixcwdmemberships.jsp lacks an XSRF token to run the repair action.
admin/fixcwdmemberships.jsp does not require a csrf token to run the repair action. When fixing this issue, please ensure that the JSP is converted to an action or deleted - we don't want to have to maintain our XSRF infrastructure in JSPs...
TOM Online WEB mailbox the presence of multiple CSRF vulnerabilities and fixes-vulnerability warning-the black bar safety net
For contains a picture of the accessory, a request to Annex when the Referer will be exposed to the current sid, for example: GET /mblogpic/be654a34c8f4aad1ec6a/2 0 0 0 HTTP/1.1 Host: t100. qpic. cn Connection: keep-alive Cache-Control: max-age=0 If-Modified-Since: Mon, 0 6 Apr 2 0 1 2 1 4:0 0:0 ...
AneCMS v. 2e2c583 local file containing the defect and repair-vulnerability warning-the black bar safety net
Title: AneCMS v. 2e2c583 LFI exploit Author Author: I2sec-PJH Software development website: https://github.com/AneGroup/AneCMS Affected version: v. 2e2c583 Overview source of index. php page the presence of defects Code analysis is as follows 1. ifisset$GET'p' 2. include './ pages/'.$ GET'p'.'...
An enterprise system is the presence of injection and solution-vulnerability warning-the black bar safety net
Brief description: An enterprise system infocont. asp file exists injectionvulnerabilities, the total Station does not filter special characters! Pro! Detailed description: A business website system infocont. aspfile exists injection. See the following code %@LANGUAGE="VBSCRIPT" CODEPAGE="9 3 6"%...
COCOON Counter statistical procedures vulnerability summary-vulnerability warning-the black bar safety net
A default database: counter/db/dbCCCounter6. mdb It can also be directly opened: http://www.badguest.cn /Counter/utilities/update. asp To view the source file, lookup! You can find the database address. Program problem. Second, the storm path vulnerability Use the probe http://www. xxx. com...
kuwebs cool the weft enterprise website management system to discover the source code of built-in Backdoor-vulnerability warning-the black bar safety net
Disclosure of status: 2012-02-17: positive contact vendors and wait for manufacturers to claim, details not open to the public 2012-02-17: the vendors have actively ignored vulnerabilities, the details disclosed to the public Brief description: The source code in the presence of a get back the...
mysql injecting sleep statements caused denial of service and repair programme-vulnerability warning-the black bar safety net
mysql the presence of injection, and injecting sleep statements if you pass in a large enough parameter, for example: sleep9 9 9 9 9 9 9 9 9 9. If the database is using the myisam engine, and the injection point is a will lock TABLE statement, insert,replace,update,delete, then the entire data...
ewebeditor version>=5. 5 tasteless 0day and fix-vulnerability warning-the black bar safety net
To 6. X also works for ASP. aspx. JSP. Are work. Use method: To access this address Editor/asp/upload. asp? action=save&type=image&style=popup&cusdir=a. asp Visit this address can establish an A. ASP folder...... Then use this html code to upload. form...
Kingdee Apusic Web framework for the backend to get the site webshell and repair-vulnerability warning-the black bar safety net
Apusic Web Management Console Default background address: admin/login. jsp The default management account password: admin admin Use method: the background has to execute SQL statements, also have to load anything. Specific words have forgotten Find Upload, a loaded God horse, just look to...
ShuzirenCMS v4. 0 background Get a Shell and fix-vulnerability warning-the black bar safety net
A simple look under the... Find Asp Php script permission to seal too tightly throughout the website, directory any one not to write Test environment/system: Digital Information Center content management system ShuzirenCMS v4. 0 / Windows Regardless of your social worker,dig yourself the...
Xiaomi technology website vulnerability collection and repair programme-vulnerability warning-the black bar safety net
Brief description: easy via Google Search, I found more of the size of the problem. Detailed description: 1, The m chat the official forum of the secondary injection. http://www.discuz.net/thread-2354532-1-1.html Patch. 2, a cross-site scripting...
Talking about web application permissions problems-vulnerability warning-the black bar safety net
Before knowing about web permissions there might be a problem, but in reality the test encountered is relatively small, today met on record: a warrior please don't waste your valuable time A, longitudinal Stripping of the right to In General the site has many users, divided into different...
Seotoaster SQL injection background login authentication to bypass the defect and repair-vulnerability warning-the black bar safety net
Seotoaster SQL-Injection Admin Login Bypass Author Stefan Schurtz www.badguest.cn [email protected] Affected Software: Successfully tested on Seotoaster v. 1. 9 Developer: http://www.seotoaster.com/ Problem status:repair Defect description ========================== Seotoaster v. 1. 9 containi...
Con-IMedia SQL injection flaws and fixes-vulnerability warning-the black bar safety net
Title: Con-IMedia SQL inj: vulnerable Author: nGa Sa Lu GaNgst3r Test platform: Vista Programming language : php ================================================================ SQL Error Statement : Warning: mysqlfetcharray: supplied argument is not a valid MySQL result resource in...
SiteServer 3.4.4 logical vulnerabilities lead to SQL injection-vulnerability warning-the black bar safety net
Author: blue girl The problem is in the UserCenter. Pages. DLL in the Register, the registration process is logical to have problems, as follows: 1. The program put the user name into the database query, if the user name is not repeated, into the second step; 2. Then in the remote detection of th...
5w five-dimensional Site Navigation v8. 0 vulnerabilities and fixes-vulnerability warning-the black bar safety net
// upload\i\index.php ? php //Slightly $controller = ! empty$GET'c' ? $GET'c' : 'index'; $action = ! empty$GET'a' ? $GET'a' : 'index'; // //cookie to automatically log and determines the uri if isset$COOKIE'cUser' && $COOKIE'cUser''userID' != 0 $userID = GetCUserID; $domain = GetCUserDomain; $sql...
Easy Hosting control panel to manage authentication bypass the defect and repair-vulnerability warning-the black bar safety net
Title: Easy Hosting Control Panel Admin Auth Bypass Author: Jasman www.2cto.com Download address: https://launchpad.net/ehcp & amp; http://www.ehcp.net Affected version: 0.29.10 - 0.29.13 Test platform: Ubuntu, Debian Overview Easy Hosting Control Panel designed for hosting of multiple domains on...
Virus removal website compromised to serving malware
Virus removal website compromised to serving malware One of the Famous Virus Removal Service website : laptopvirusrepair.co.uk is compromised and Hacker is Serving Malware on the website. In above screenshot Avira detects the JS/Blacole.psak Java script Virus hosted on the site. The snippet of co...