e107 content management system usersettings. php page there is SQL injection vulnerability-vulnerability warning-the black bar safety net

e107 is a php written content management system. e107 of the usersettings. php page existsSQL injectionvulnerabilities: if $ret == ’ $loginname = striptags$POST’loginname’; if !$ loginname $loginname = $udata’userloginname’; else if! checkclass$pref’displaynameclass’, $udata’userclasslist’, $peer...

Boiling 3AS stray dust edge of information systems(core:dust edge of the ya border graphic systems)V0. 4 5 ACCESS Edition-vulnerability warning-the black bar safety net

Drain hole: boiling 3AS stray dust edge news system registration vulnerability Vulnerability to hazards: may be any of the register a super administrator account Use method: Looking for target can search a keyword: V0. 4 5 ACCESS version Finish Boiling news system（hereinafter referred to as the...

BlaB! Lite remote file include vulnerability-vulnerability warning-the black bar safety net

Remote file inclusion vulnerability, you can get a website webshell Official address: Download:http://hot-things.net/cs/dndnormal/blab50lite.zip Vulnerability file: blab50lite/register.php Trojan: a http://localhost/blab50lite/register.php?skindir=shell.txt POC: the...

YYCMS music app v4. 0 VIP version of the default database download vulnerability-vulnerability warning-the black bar safety net

YYCMS music app v4. 0 VIP version, just looked at the database file conn. asp file in the address database is YYCMSData/67tingdata. asa. Just starting to think this is the default database, and then view the database files found in the database Is /YYCMSData/user. asa1 Vulnerability one:...

BBSGood Forum program multi-page SQL injection vulnerability-vulnerability warning-the black bar safety net

BBSGOOD is domestic first using the cache technology Forum, BBSGOOD posts and list home can generate a static HTML file. 1. In the file DelShortInFo. asp: selectid=trimRequestCStringSafeRequest"selectid" //the 1 Line 1 If selectid"" then selectid = replaceselectid, ", ", " or ID=" selectid="Where...

C9 static article publishing system vulnerabilities 0day-vulnerability warning-the black bar safety net

See the one called C9 static article publishing system The program is just not carefully watched. Today download back a see under found problems in the vote there is a flash voting system, flash I don't understand, then grabbed a pack to see found is by add. asp submitted to the vote of the xml...

Days edge of the business website system through the kill 0day-vulnerability warning-the black bar safety net

Bulkwww.google.cn inurl:Products. asp? mainid=1 Their attention to looking under the backend, and then modify the action=“”, address EXp: form name="administratoradd" method="post" id="password" action="" span class="rightbody" /span table width="9 9%" border="0" align="center" cellpadding="0"...

FCKeditor upload vulnerability find upload path-vulnerability warning-the black bar safety net

Online popular The is upload is like this http://localhost/fckeditor/editor/filemanager/browser/default/browser.html?Type=Image&Connector=../../connectors/asp/connector. asp...

An electronic network Cms 0DAY-vulnerability warning-the black bar safety net

Night bored, come up with a Shell, flipped, found a new it. Don't know which home system, then Google a bit. Discover seems to be what is called an electronic website system. The main vulnerability is still that dynamic shopping upload, for a while it got more than a dozen Shell, including a...

php168 buy get administrator privileges 0day-vulnerability warning-the black bar safety net

The exploit: the 1. Registered normal user 2. By http://site/buygroup.php?job=buy&gid=3purchase administrator privileges. 3. The background that 2webshell...

The latest IE 0day vulnerability Metasploit to generate method-vulnerability warning-the black bar safety net

A, Download http://www. rec-sec. com/exploits/msf/ieiepeerspointer. rb Second, placed to C:\Metasploit\Framework3\msf3\modules\exploits\test. A change of name ie. rb Third, start msfconsole Fourth, the msf use exploit/test/ie msf exploitie show optinos Echo: the Module options: Name Current Setti...

phpcms2008 sp3 through the kill 0day-vulnerability warning-the black bar safety net

This vulnerability six months ago by the dindle released in the ocean to the top, so reproduced, please famous source Injection yp/company. php? where=%2 3 Get backstage access http://www.xx.com/admin.php?mod=phpcms&file=safe&action=seecode&files=kindle.php ! Edit the shell, in addition phpcms200...

PHP168 V6. 0 2 cross-site vulnerability-vulnerability warning-the black bar safety net

PHP168 whole Station is the PHP field is currently the most powerful built Station system, all open source, can be extremely convenient for secondary development, All modules can be freely installed and removed, the individual user is completely free to use. Test code:...

Action Network(DVbbs) Ver 8.3.0 multiple cross-site vulnerabilities-vulnerability warning-the black bar safety net

Dynamic network Forum as currently domestic maximum of Community Forum software service provider, relies on its powerful of features, phenomenal access speed and load capacity, and friendly convenient of customer operation interface, quality customer service, leading technology and strong and...

fckeditor 2.63 0day vulnerabilities-vulnerability warning-the black bar safety net

First of all, the way. This can be said that the fckeditor 2.63 oday. Currently know more people. http://xxxx.com/fckeditor/editor/filemanager/connectors/test.html http://hbkingco.com//fckeditor/editor/filemanager/connectors/uploadtest.html this two page, is a dead key. Upload xx. asa;. jpg After...

A permanent network of personal music box LajoxBox v1. 1 latest upload exploit-vulnerability warning-the black bar safety net

Vulnerability description: 1. The default database download 2. Background verification is not strictly, there upload vulnerability that can be submitted to the asa horse The exploit: the 1. Download default database data/music. asa, will bereplaced with%2 3 to download. 2. http://www. hackqing...

eWebEditor . Net versions vulnerability-vulnerability warning-the black bar safety net

Release date: 2010-04-23 Affected versions: ASPX version Vulnerability description: eWebEditorNet is mainly a upload. aspx file there upload vulnerability. Principle: Code form id="post" encType="server" "uploadfile" style="file" size="uploadfile" runat= "lbtnUpload" runat= "JavaScript" Just a...

dedecms 5.5 procedure leaked site path information-vulnerability warning-the black bar safety net

Vulnerability description: dedecms 5.5 procedure leaked site path information. Test address: http://www.dedecms.com/plus/paycenter/alipay/returnurl.php http://www.dedecms.com/plus/paycenter/cbpayment/autoreceive.php http://www.dedecms.com/plus/paycenter/nps/configpaynps.php...

SHOPXP online shopping system v10. 3 1 injection vulnerability Exp-vulnerability warning-the black bar safety net

Limitations is very big, also is the background a file didn't do the filter. So yeah, a lot of stations changed the background, so is useless. EXP: !-- ShopXpOday -- !-- inurl:xpCatalogxpDesc. asp? actionkeyorder= Or inurl:shopxpnews. asp - form action="" method="post" label div align="left"ShopX...

fckeditor 2.63 0day vulnerabilities-vulnerability warning-the black bar safety net

First of all, the way. This can be said that the fckeditor 2.63 oday. Currently know more people. http://xxxx.com/fckeditor/editor/filemanager/connectors/test.html http://hbkingco.com//fckeditor/editor/filemanager/connectors/uploadtest.html this two page, is a dead key. Upload xx. asa;. jpg After...