Siteserver CMS 3.6.3 SQL注入漏洞

SiteServer CMS 是基于微软.NET 平台开发的网站内容管理系统。 Siteserver 3.6.3版本存在SQL注入漏洞，由于ENName参数没有经过任何过滤，攻击者可以利用漏洞执行任意命令。 0 Siteserver CMS 3.6.3 目前厂商暂无提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.siteserver.cn/...

SiteServer 3.6.4 /siteserver/cms/console_logSite.aspx SQL注入漏洞

No description provided by source...

SiteServer 3.6.4 /siteserver/bbs/background_post.aspx SQL注入漏洞

No description provided by source...

SiteServer 3.6.4 /siteserver/bbs/background_keywordsFilting.aspx SQL注入漏洞

No description provided by source...

SiteServer 3.6.4 /siteserver/bbs/background_thread.aspx SQL注入漏洞

No description provided by source...

SiteServer 3.6.4 /siteserver/cms/background_nodeGroup.aspx SQL注入漏洞

No description provided by source...

SiteServer 3.6.4 /siteserver/bbs/background_user.aspx SQL注入漏洞

No description provided by source...

SiteServer 3.6.4 /siteserver/userRole/background_user.aspx SQL注入漏洞

No description provided by source...

SiteServer 3.6.4 /siteserver/userRole/background_administrator.aspx SQL注入漏洞

No description provided by source...

SiteServer 3.6.4 /SiteServer/cms/console_user.aspx SQL注入漏洞

No description provided by source...

SiteServer 3.6.4 /siteserver/service/background_taskLog.aspx SQL注入漏洞

No description provided by source...

SiteServer 3.6.4 /siteserver/platform/background_log.aspx SQL注入漏洞

No description provided by source...

Siteserver 3.6.3 version SQL injection vulnerability-vulnerability warning-the black bar safety net

! The latest official version 3. 6. 4。 Scan siteserver 3.6.3 version of the directory structure, get URL as follows http://www.domain.gov.cn/siteserver/CMS/consoletableMetadata.aspx?ENName=cmsContent&TableType=BackgroundContent The injection point there ENName, completely without any filtering...

siteserver 3.6.4 /siteserver/cms/background_fileTree.aspx 目录遍历漏洞

No description provided by source...

Siteserver 3.6.3 /siteserver/CMS/console_tableMetadata.aspx SQL注入漏洞

No description provided by source...

SiteServer 3.4 /LiveFiles/Pages/Inner/count.aspx SQL注入漏洞

No description provided by source...

SiteServer cms Cookie spoofing vulnerability-vulnerability warning-the black bar safety net

Brief description: . net platform SiteServer cms he the powerful is unquestionable, but the problem is also many, The discovery of the cookies tricking a gold after testing, 3.44 above version of the pass to kill Detailed description: ! Local set up an environment and then log in to grab the...

SiteServer CMS UserCenter/login. aspx page the user name at sql injection-vulnerability warning-the black bar safety net

After testing spike the latest of the 3. Version 5 stieserver official website:www. siteserver. cn EXP: Direct access to the UserCenter/login. aspx The username at the input: 1 2 3'insert into bairongAdministratorUserName,Password,PasswordFormat,PasswordSalt...

8 ways siteserver background getwebshell and safety recommendations-vulnerability warning-the black bar safety net

First: stencil management to directly modify the file source code can be obtained webshell Second: editor vulnerability http://demo2.siteserver.cn/siteserver/TextEditor/fckeditor/ can get webshell Third: stencil add actually have add asp to the aspx file the template in webshell Fourth: the page...

SiteServer CMS 3.5 background upload WEBSHELL-vulnerability warning-the black bar safety net

Version number: SiteServer CMS 3.5 Background,Upload a single GIF format Trojan. Then,through the site, file management,modify the file name,you can modify the picture Trojan horse in the format . aspx Version number: SiteServer CMS 3.5 http://demo2.siteserver.cn/siteserver/login.aspx Account:...