phpcms v9 后台任意文件读取(可获取authkey)

No description provided by source...

PHPCMS V9 phpsso/index.php authkey 泄露漏洞

No description provided by source...

KingCms v9 /api/conn.php 目录遍历及任意文件读取漏洞（无需截断）

No description provided by source...

KingCms v9 /api/conn.php 信息泄漏漏洞

No description provided by source...

Apple iOS v9.x - Application Update Loop Pass Code Bypass

Document Title: =============== Apple iOS v9.x - Application Update Loop Pass Code Bypass References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1711 View Video: https://www.youtube.com/watch?v=V-9lE1L3nq0 Apple Follow-up ID: 631627909 Advisory:...

Apple iOS v9.x - Application Update Loop Pass Code Bypass

Document Title: =============== Apple iOS v9.x - Application Update Loop Pass Code Bypass References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1711 View Video: https://www.youtube.com/watch?v=V-9lE1L3nq0 Apple Follow-up ID: 631627909 Advisory:...

KingCMS V9 manage.php 任意用户密码重置漏洞

No description provided by source...

PHPCMS V9 /api.php Authkey 信息泄漏

No description provided by source...

phpcms v9用户登录处存在sql注入漏洞

password字段如果存在特殊字符，在传入到程序时仍然会被转义，而且在phpsso的login中使用的是username做数据库查询，而不是password。针对第一个问题我们可以使用二次url编码的方法来搞定，在解码之后程序还是用了parsestr对字符串进行了拆解，而这个函数还附带了解url编码的功能。所以，我们只需要在传password内容时传递%2527就可以让单引号出现在phpsso的变量中了。第二个问题也用到parsestr的功能，parsestr在解析“username=123&password=456”这样的字符串，会把它解析为：Array username=123,...

phpcms v9 /modules/phpsso/index.php SQL注入漏洞

No description provided by source...

ManageEngine ServiceDesk Plus Arbitrary File Upload

This module exploits a file upload vulnerability in ManageEngine ServiceDesk Plus. The vulnerability exists in the FileUploader servlet which accepts unauthenticated file uploads. This module has been tested successfully on versions v9 b9000 - b9102 in Windows and Linux. The MSP versions do not...

phpcms v9 latest high-risk sql injection exp-vulnerability warning-the black bar safety net

Get the current database http://192.168.1.139:8080/phpcms/index.php?m=member&c=index&a=login post: forward=http%253A%252F%252F192. 1 6 8. 1. 1 3 9%253A8080%252Fphpcms%252Findex. php%253Fm%253Dmember&username=phpcms&password=1 2 3 4 5 6%26username%3d%2 5 2 7%2bunion%2bselect%2b%2 5 2 7 2% 2 5 2...

用友政务官方网站存在漏洞导致authkey泄露

简要描述： 用友政务官方网站存在漏洞导致authkey泄露 详细说明： 同学在用友政务工作，闲着没事看了看他们的官方网站，顺便手贱摸了一下·· http://www.yonyougov.com/index.php?m=admin&c=index&a=login&pchash= PHPCMS V9的系统 authkey很重要，可注射拿shell...

PHPCMS V9 /phpsso_server/phpcms/modules/phpsso/index.php SQL注入漏洞

/api/getmenu.phpfunction ajaxgetlist $cachefile = $GET'cachefile'; $cachefile = strreplacearray'/', '//', '', $cachefile; //$cachefile = pregreplace'/\x00-\x08\x0B\x0C\x0E-\x1F\x7F+/S', '', $cachefile; $path = $GET'path'; $path = strreplacearray'/', '//', '', $path; //$path =...

search.v9.com XSS vulnerability

Open Bug Bounty ID: OBB-54619 Description| Value ---|--- Affected Website:| search.v9.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

PHPCMS V9 one pleases vulnerability-vulnerability warning-the black bar safety net

Brief description: Don't know how to describe this vulnerability, anyway, in most cases you can do many things. Website registration is not on, it is not the official website demo. Detailed description: Install phpcms time will be forced to install it pass...

phpcms 9.0 - Blind SQL Injection Vulnerability

No description provided by source. ================================================================= phpcms V9 BLind SQL Injection Vulnerability ================================================================= Software: phpcms V9 Vendor: www.phpcms.cn Vuln Type: BLind SQL Injection Download link...

BSDi 3.0 / 4.0 rcvtty[mh] Local Exploit

No description provided by source. / BSDi3.0/4.0rcvttymh local exploit, by [email protected]. this exploit is for the rcvtty of the mh package, which is setgid=4tty on BSDi. this exploit gives you egid/group=4tty access. example: ------------------------------------------------- bash-2.02$ id...

kon2 Local Buffer Overflow Vulnerability (2)

No description provided by source. source: http://www.securityfocus.com/bid/7790/info A buffer overflow vulnerability has been reported for the kon2 utility shipped with various Linux distributions. Exploitation of this vulnerability may result in a local attacker obtaining elevated privileges on...

phpcms v9 front Desk unlimited GETSHELL-a vulnerability warning-the black bar safety net

0×0 1:An Introduction PHPCMS V9（hereinafter referred to V9 with PHP5+MYSQL as the technical basis for development. V9 using OOP for object mode for running based frame structures. The modular development approach as a function of development forms. Framework easy functionality expansion, code...