Rain Joe(YuQa)Network Information feedback system YuQaIFS V1. 0 vulnerability 0day and fix-vulnerability warning-the black bar safety net

Publishing author: f4tb0y Affected versions: YuQaIFS V1. 0 Vulnerability type: design flaw Vulnerability Description: a vulnerability in the file is YuQaIFSSave. the asp directly to the submitted data is written to the database, without any filtering. 主页 面 www.xxx.com/xx/index.asp（xx for this...

Ganji is a SQL injection BUG and solution-vulnerability warning-the black bar safety net

| Detail: To unsubscribe from there. $. post'/event/cancelSmsNotify/' , phone : "sdf'dsf" , functionret alert'unsubscribe successful'; Injection parameters phone Vulnerabilityproof: phone=sdf'dsf br / bFatal error/b: Uncaught exception 'Exception' with message '1 0 6 4: You have an error in your...

EimsCms v5. 0 XSS+CSRF=GetShell-a vulnerability warning-the black bar safety net

| EimsCms v5. 0 XSS+CSRF=GetShell 作者 :B0mbErM@n Time:2011-01-28 ------ GetShell----- 1 in the Book. asp the mailbox at the fill in the word,submission 2 in the Book. the asp mailbox fillXSSstatement in the CSRF 3 wait for the administrator to triggerXSSstatement,and then words connected to the...

EasyTalk microblogging local file inclusion vulnerability-vulnerability warning-the black bar safety net

Release date: 2011-01. 2 9 Publishing author: sw0rder Affected versions: EasyTalk Official website: Vulnerability type: a file that contains Vulnerability description: Vulnerability file in“wap/index.php”,the key code is as follows: ? php errorreporting7; define'INET', TRUE;...

Ganji is a SQL injection BUG and solution-vulnerability warning-the black bar safety net

| Detail: To unsubscribe from there. $. post'/event/cancelSmsNotify/' , phone : "sdf'dsf" , functionret alert'unsubscribe successful'; Injection parameters phone Vulnerabilityproof: phone=sdf'dsf br / bFatal error/b: Uncaught exception 'Exception' with message '1 0 6 4: You have an error in your...

DEDECMS exploit 0day a gold-bug warning-the black bar safety net

Published author: the mind Affected versions: dedecms Official website: http://www.dedecms.com Vulnerability type: design error Vulnerability description: Vulnerability code: member\indexdo.php else if$fmdo=='login' // http://127.0.0.1/member/indexdo.php?fmdo=login&dopost=login came to this step...

HDWiKi V 5.0 local include vulnerability 0Day-vulnerability warning-the black bar safety net

Release date: 2011-01. 2 3 Publishing author: HYrz Affected versions: HDWiKi V 5.0 Official website: http://kaiyuan.hudong.com Vulnerability type: a file that contains Vulnerability description: From the source code see there is indeed a problem,we just Upload a picture of the Trojan can be norma...

Journal newspaper system Fckeditor-0day-vulnerability warning-the black bar safety net

Published author: love letters Affected versions: JournalX 2.0 Official website: PRODUCT DESCRIPTION: JournalX 2.0 first for Publishing/Group, Journal of Industry, introduced the overall solution. There are already in all over the country 6 0 0 more than magazine, more than a dozen publishers...

CVE-2011-0640

The default configuration of udev on Linux does not warn the user before enabling additional Human Interface Device HID functionality over USB, which allows user-assisted attackers to execute arbitrary programs via crafted USB data, as demonstrated by keyboard and mouse data sent by malware on a...

phpcms 2 0 0 8 V2 injection vulnerability 0day analysis-vulnerability warning-the black bar safety net

Release date: 2011-01. 2 2 Publishing author: xhm1n9 Affected versions: Phpcms 2 0 0 8 V2 Official website: Vulnerability type: SQL injection Vulnerability description: 根目录下flashupload.php file$modelid useless in single quotation marks protection, the front is also missing the filter, the presenc...

phpcms V9 BLind SQL injection vulnerability 0day-vulnerability warning-the black bar safety net

Release date: 2011-01. 2 3 Publishing author: eidelweiss Affected versions: phpcms v9 blind Official website: http://www.phpcms.cn Vulnerability type: SQL injection Vulnerability description: phpcms v9 blind parameter filter existsSQL injectionvulnerabilities. google dork:inurl:"index. php?...

Hua-speed online trading platform V13 full version more than the presence of injection vulnerabilities-vulnerability warning-the black bar safety net

Publishing author: wandering wind Affected versions: V13 Official website: http://www.hs173.cn Vulnerability type: SQL injection Vulnerability Description: The program is also the only anti-get and post two kinds of injection, then we can use the cookie injection, get admin username and password...

6CMS enterprise website management system(The English fan trilingual Edition) sql injection vulnerability-vulnerability warning-the black bar safety net

| g. cn keyword: 6CMS enterprise hope Station management systemEnglish fan trilingual Edition Default account password: admin Background: admin/ Also don't know programmer How do I see the program in the admin directory there is a anti-injection sql. asp But the parent directory was not Default...

HDWiKi V 5.0 local contains 0Day-vulnerability warning-the black bar safety net

| 漏洞 文件 :\install\install.php Key code: ? php errorreportingEERROR | EWARNING | EPARSE; define'INHDWIKI', TRUE; define'HDWIKIROOT', '../'; $langname=$COOKIE'langname';/langname without any filter,direct from the Cookies deposited in langname/ ifisset$REQUEST'lang' / Detect whether the variable is...

Hackers Steal $ 150,000 Malware Job Search !

Small businesses are worried about a new scam: criminals in search of work who want to break into online bank accounts. The U.S. Federal Bureau of Investigation issued a warning Wednesday on a new version of a fraud technique called long-term computer automated information exchange fraud. With AC...

Million network the Main Station due to filter poor lead to cross-site multi-use vulnerability-vulnerabilities and early warning-the black bar safety net

Brief description: The Main Station is due to submit content security checks generated by the vulnerability Detailed description: http://www.hichina.com/hasclient/whois1.asp?tongyong=yes&domain=xxx&code=0 0 0 0 Modify the three variables in any one place for' Since the Universal network of securi...

GOOGLE BOOK the MHTML Protocol injection-XSS vulnerability-vulnerability warning-the black bar safety net

Brief description: GOOGLE BOOK search output gaps, by the MHTML Protocol injection script code to run, resulting in aXSSvulnerabilities. Non-original, forwarded from the white hat group system32 total. Detailed description: Vulnerability to prove: mhtml:http://www. google. com/books?...

N - 1 3 news 3.4 remote admin add CSRF vulnerability-vulnerability warning-the black bar safety net

EXP: the html head titleRemote Admin Add CSRF Exploit/title /head H2Remote Admin Add CSRF Exploit by qing-Edit/H2 formmethod="POST"name="form0"action="http://localhost/news/admin.php?action=options&mod=accounts&create=new" inputtype="hidden"name="accountname"value="admin" /...

TinyBB 1.2 script injection vulnerability-vulnerability warning-the black bar safety net

Author: Aodrulez Test environment: Ubuntu 10.04 In GOOGLE direct search: TinyBB 2 0 1 1 all rights reserved to search for such sites Use http://. org/index. php? page=profile&id=' or 'a'='a Contact the author: [email protected]...

EXCMS 0day vulnerability analysis-vulnerability warning-the black bar safety net

Published author: the mind Affected versions: unknown Official website: http://www.excms.cn/ Vulnerability type: COOKIES cheat Exploit Description: This exploit to modify the COOKIE directly into the background, custom page Getshell it. The backend log file admin\Modules\Auth\Index.php ? if defin...