shopex注册用户任意定义预存款余额或积分

简要描述： shopex在注册用户时存在验证不严，导致注册时可以随意定义预存款余额或积分等字段的内容 详细说明： 在文件\core\shop\controller\ctl.passport.php if !$info = $account-create$POST,$message $this-splash'failed','back',$message,'','',$POST'fromminipassport'; 用户注册的变量都保存在$POST中，继续看根目录文件index.php filterData$POST; require...

shopex最新版前台一处想不到的SQL注入

简要描述： shopex代码核心的地方都做了加密处理，找漏洞就需要一点想象空间了，比如这个SQL注入... 详细说明： 存在于用户注册想不到的位置吧？ 1. /core/shop/controller/ctl.passport.php 267行 if !$info = $account-create$POST,$message ... 2.看到1，想到有没有可能$account-create是foreach $POST构造sql语句的呐？ 3.看数据表结构： 果断提交时$POST里加入memberid测试其实测试时我还试了mobile等，嘿，只捡有用的字段说，然后就有了下图： 漏洞证明：...

ecshop最新版本多处鸡肋SQL注射

简要描述： 最近ecshop注射那么火，我也发一个鸡肋但还可用的，一处引起，多处注射的SQL漏洞。。。 详细说明： 这是一个二次注入，由于验证不正确而引起的二次注入。 此功能需要开启网站wap功能，这就是所说的鸡肋之处。 http://localhost/mobile/user.php?act=register 代码： mobile/user.php 187 行左右 elseif $act == 'actregister' 此处没有对用户提交的数据作任何验证。 即用户名，email等一堆变量没有验证，直接进入数据库。 当再次读取时，造成二次SQL注入。...

PHPDrive privilege elevation vulnerability and the Fix-vulnerability warning-the black bar safety net

PHPDrive is set to run in the PHP environment file management system, can be applied to a network disk, enterprise document management, schools, team management, software, file, CMS, etc. includes/user.lib.php Row 8 7 function getip ifisset$SERVER"HTTPXFORWARDEDFOR"&&$SERVER"HTTPXFORWARDEDFOR" $i...

CVE-2012-5890

The Front End User Registration srfeuserregister extension before 2.6.2 for TYPO3 allows remote attackers to obtain user names and passwords via the 1 edit perspective or 2 autologin feature...

CVE-2012-5890

The CVE-2012-5890 entry concerns the Front End User Registration (sr_feuser_register) extension for TYPO3, affected up to version 2.6.1. The root cause is a vulnerability in the extension that allows remote attackers to obtain user names and passwords through the edit perspective or autologin fea...

A Recruitment System 0day a gold-bug warning-the black bar safety net

Google: the keywords: inurl:IndexPerson. asp inurl:headhunt ! Use steps: 1. Front Desk registered users 2. Upload photos ! 3. Capture 4. Modification packet nc truncated to submit ! If the directory can not write the situation, change the Upload Directory to...

WordPress Theme Archin 3.2 - Configuration Access

WordPress Theme Archin 3.2 - Configuration Access Exploit Title: Archin WordPress Theme Unauthenticated Configuration Access Date: Sept 29, 2012 Exploit Author: bwall @bwallHatesTwits Vendor Homepage: http://themeforest.net/user/wptitans Software Link:...

shopex front Desk ordinary users getshell the latest vulnerability-vulnerability warning-the black bar safety net

Use method: First: think of a way to find the target site's absolute path http://www.wooyun.in/install/svinfo.php?phpinfo=true http://www.wooyun.in/core/api/shopapi.php http://www.wooyun.in/core/api/site/2.0/apib2b20cat.php http://www.wooyun.in/core/api/site/2.0/apib2b20goodstype.php...

Grand phpcmsv9 burst pipe processing password vulnerability-vulnerability warning-the black bar safety net

Vulnerability type: SQL injection vulnerability Hazard rating: high The self-assessment Rank: 1 to 5 Vulnerability status: the vulnerability has notified the manufacturer but the manufacturer ignored the vulnerability Brief description: Grand phpcmsv9 squib processing the password vulnerability o...

PHPCMS V9.17 api/add_favorite.php SQL注入漏洞

$title = urldecode$title; $data = array'title'=$title, 'url'=$url, 'adddate'=SYSTIME, 'userid'=$userid; $favoritedb-insert$data; api.php需要注册用户才能访问，因此利用需要注册用户，并且登录，然后可以直接提交： /api.php?op=addfavorite&url=J&title=%2527%2520and%2520%2528select 这里是V9，因此，我们构造一下语句先： select count,concatselect select selec...

CVE-2012-3837

Multiple cross-site scripting XSS vulnerabilities in apps/users/registration.template.php in Baby Gekko 1.2.0 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 username, 2 emailaddress, 3 password, 4 passwordverify, 5 firstname, 6 lastname, or 7 verificationcode...

CVE-2012-3837

Multiple cross-site scripting XSS vulnerabilities in apps/users/registration.template.php in Baby Gekko 1.2.0 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 username, 2 emailaddress, 3 password, 4 passwordverify, 5 firstname, 6 lastname, or 7 verificationcode...

CVE-2012-2706

Cross-site scripting XSS vulnerability in the Post Affiliate Pro PAP module for Drupal allows remote attackers to inject arbitrary web script or HTML via vectors related to user registration...

Cross site scripting

Cross-site scripting XSS vulnerability in the Post Affiliate Pro PAP module for Drupal allows remote attackers to inject arbitrary web script or HTML via vectors related to user registration...

CVE-2012-2706

Cross-site scripting XSS vulnerability in the Post Affiliate Pro PAP module for Drupal allows remote attackers to inject arbitrary web script or HTML via vectors related to user registration...

Swoopo Gold Shop CMS 8.4.56 Cross Site Scripting / SQL Injection

Title: ====== Swoopo Gold Shop CMS v8.4.56 - Multiple Web Vulnerabilities Date: ===== 2012-05-14 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=515 VL-ID: ===== 515 Common Vulnerability Scoring System: ==================================== 8.5 Introduction: ============...

Swoopo Gold Shop CMS 8.4.56 - Multiple Web Vulnerabilities

Swoopo Gold Shop CMS 8.4.56 - Multiple Web Vulnerabilities Title: ====== Swoopo Gold Shop CMS v8.4.56 - Multiple Web Vulnerabilities Date: ===== 2012-05-14 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=515 VL-ID: ===== 515 Common Vulnerability Scoring System:...

NewsAdd 1.0 - Multiple SQL Injections

NewsAdd 1.0 - Multiple SQL Injections Exploit Title: NewsAdd =1.0 Multiple SQL Injection Google Dork: ----------------------------------- Date: 2012/05/29 Author: WhiteCollarGroup Software Link: http://phpbrasil.com/script/3tCyUs1JeL1M/newsadd--mysql Version: 1.0 Tested on: Debian GNU/Linux...

NewsAdd <=1.0 Multiple SQL Injection Vulnerabilities

Exploit for php platform in category web applications Exploit Title: NewsAdd =1.0 Multiple SQL Injection Google Dork: ----------------------------------- Date: 2012/05/29 Author: WhiteCollarGroup Software Link: http://phpbrasil.com/script/3tCyUs1JeL1M/newsadd--mysql Version: 1.0 Tested on: Debian...