Simplog-Exploit

Simplog-Exploit 本仓库包含针对 CVE-2009-4092 Simplog CSRF 漏洞的环境搭建、漏洞利用和补丁。 该漏洞存在于 Simplog 0.9.3.2 的 user.php 文件中，Simplog 是一款 Web 应用程序，用于帮助用户在其个人网站上轻松创建和维护博客。攻击者可以利用跨站请求伪造（CSRF），通过发送恶意请求更改密码，从而劫持用户身份验证过程。 设置 我们的环境搭建包括一个能够处理 PHP 页面的 Apache Web 服务器（运行在 localhost 上），以及一个托管在同一台服务器上的 MySQL 数据库。 漏洞利用 补丁 免责声明...

EUVD-2009-4064

Malware in sbrugna...

CVE-2009-4091

comments.php in Simplog 0.9.3.2, and possibly earlier, does not properly restrict access, which allows remote attackers to edit or delete comments via the 1 edit or 2 del action...

Deserialization of untrusted data

comments.php in Simplog 0.9.3.2, and possibly earlier, does not properly restrict access, which allows remote attackers to edit or delete comments via the 1 edit or 2 del action...

CVE-2009-4093

Multiple cross-site scripting XSS vulnerabilities in comments.php in Simplog 0.9.3.2, and possibly earlier, allow remote attackers to inject arbitrary web script or HTML via the 1 cname Name or 2 email parameters...

CVE-2009-4092

Cross-site request forgery CSRF vulnerability in user.php in Simplog 0.9.3.2, and possibly earlier, allows remote attackers to hijack the authentication of administrators and users for requests that change passwords...

Simplog 0.9.3.2 - Multiple Vulnerabilities

Simplog 0.9.3.2 - Multiple Vulnerabilities Mutliple Vulnerabilities in Simplog v0.9.3.2 Name Multiple vulnerabilities in Simplog Systems Affected Simplog 0.9.3.2 and possibly earlier versions Download http://sourceforge.net/projects/simplog/files/simplog/0.9.3.2/simplog-0.9.3.2.tar.gz/download...