1033 matches found
Wordpress Automatic Plugin 2.0.3 - SQL Injection
No description provided by source. Title: ====== Wordpress Automatic Plugin v2.0.3 SQL Injection Date: ===== 2012-06-15 Website: =========== http://codecanyon.net/item/wordpress-automatic-plugin/1904470 Introduction: ============= Wordpress automatic plugin posts quality targeted articles, Amazon...
Magic Photo Storage Website user/login.php _config[site_path] Parameter Remote File Inclusion
No description provided by source. source: http://www.securityfocus.com/bid/21965/info Magic Photo Storage Website is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow an attacker to compromise the...
Cmseasy SQL注射漏洞 2
简要描述： 注入..无限制 详细说明： frontclass.php 对 username 做了限制 但是 忘了\转义符 ifpregmatch'/'|"/', $POST'username' || pregmatch'/'|"/', $GET'username' || pregmatch'/'|"/', $COOKIE'loginusername' exit'非法参数'; 先看注册 useract.php 289 行: function registeraction iffront::post'submit' if!config::get'regon'...
Domain restricted signup is creating enabled users on ApacheDS
When a user signs up to a Confluence instance that has domain restricted sign up enabled, they are normally created as disabled users and are unable to login. However, when the underlying user directory does not support disabling users, such as ApacheDS 1.5, then the user ends up being created as...
ESPCMS最新 V5.8.14.03.03 UTF8 正式版暴力注入
简要描述： 弱加密算法的悲剧 伪造任意用户登录 注入 一系列问题 详细说明： /public/classdbmysql.php行144 function eccode$string, $operation = 'DECODE', $key = '@LFK24s224%@safS3s%1f%', $mcrype = true $result = null; if $operation == 'ENCODE' for $i = 0; $i fun-setcookie'ecispmemberusername', $this-fun-eccode$memberread'username',...
Easy currency network operation and maintenance improper leads can be randomly logged in user-bug warning-the black bar safety net
Easy currency network operation and maintenance improper can lead to a random user login http://www. easecoin. com/ vulnerability address You can get the user SESSION login ! ! Feel free to test landing 2 Repair solutions: You can repair, I will not waste the effort of typing to what vulnerabilit...
NetCms website management system upload vulnerability and fix-vulnerability warning-the black bar safety net
NetCms website management system upload vulnerability and fix Vulnerabilities Web application:NetCms website management system Vulnerability in the file the website registration address:/user/login. aspx 1. First of all, we in the Baidu or Google searchkeywords: “NetCms site management system” ! ...
CVE-2013-7273
GNOME Display Manager gdm 3.4.1 and earlier, when disable-user-list is set to true, allows local users to cause a denial of service unable to login by pressing the cancel button after entering a user name...
CVE-2013-7273
GNOME Display Manager gdm 3.4.1 and earlier, when disable-user-list is set to true, allows local users to cause a denial of service unable to login by pressing the cancel button after entering a user name...
HDWIKI tasteless 0day-vulnerability warning-the black bar safety net
model/user.class.php to: function addreferer if$SERVER'HTTPREFERER' $this-db-query"UPDATE". DBTABLEPRE."session SET referer='".$ SERVER'HTTPREFERER'."' WHERE sid='". base::hgetcookie'sid'."'"; //Problems then this functiongetreferer $session=$this-db-fetchfirst"SELECTreferer FROM "...
Srun3000计费系统 命令执行2
简要描述： Srun3000计费系统 命令执行2 详细说明： /srun3/srun/web/admin/fluxstat/room.php ?php header"Content-type:text/html;charset=gb2312"; require"iptauthdconn.php"; require"../functions/functions.php"; $debug=1; switch$POST"action"// case "checkout": $userloginname=$POST"userloginname";...
Stable Channel Update for Chrome OS
Update: Samsung Chromebook has been updated to 33.0.1750.124 Platform version: 5116.88.2 The Stable channel has been updated to 33.0.1750.124 Platform version: 5116.88.0 for all Chrome OS devices except Samsung Chromebook. This build contains a number of bug fixes, security updates and feature...
CVE-2014-1931
The user login page in Visibility Software Cyber Recruiter before 8.1.00 generates different responses for invalid password-retrieval attempts depending on which data elements are incorrect, which might allow remote attackers to obtain account-related information via a series of requests...
CVE-2014-1931
The CVE-2014-1931 issue affects Visibility Software Cyber Recruiter prior to version 8.1.00. The login page returns different responses to invalid password-retrieval attempts depending on which data elements are incorrect, enabling potential information disclosure about-account information throug...
CVE-2014-1931
The user login page in Visibility Software Cyber Recruiter before 8.1.00 generates different responses for invalid password-retrieval attempts depending on which data elements are incorrect, which might allow remote attackers to obtain account-related information via a series of requests...
DomPHP <= v0.83 SQL注入漏洞
No description provided by source. ------------------------------------------------------------- DomPHP = v0.83 SQL Injection Vulnerability ------------------------------------------------------------- = Author : Houssamix = Script : DomPHP = v0.83 = Download : http://www.domphp.com/download/ = B...
信游科技页游平台模板多处SQL注入漏洞
简要描述： 信游科技各大模板多处SQL注入漏洞，所有模板，均存在相应漏洞 详细说明： 1.用户登录处未对用户名uid进行过滤，导致SQL注入 为避免影响，以测试站点为例： sqlmap.py -r "C:\1.txt" -p "uid" --tables POST /api/remote/login.ashx?cid=0.16956438540776841 HTTP/1.1 Host: xy003.52xinyou.cn User-Agent: Mozilla/5.0 Windows NT 6.1; WOW64; rv:26.0 Gecko/20100101 Firefox/26.0...
DomPHP 0.83 - SQL Injection
------------------------------------------------------------- DomPHP = v0.83 SQL Injection Vulnerability ------------------------------------------------------------- = Author : Houssamix = Script : DomPHP = v0.83 = Download : http://www.domphp.com/download/ = BUG : SQL Injection Vulnerability =...
