Wifi Photo Transfer 2.11.1 PRO - Multiple Vulnerabilities

Wifi Photo Transfer 2.11.1 PRO - Multiple Vulnerabilities Title: ====== Wifi Photo Transfer 2.1 & 1.1 PRO - Multiple Vulnerabilities Date: ===== 2013-04-21 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=932 VL-ID: ===== 932 Common Vulnerability Scoring System:...

File Lite 3.3/3.5 PRO iOS - Multiple Vulnerabilities

Title: ====== File Lite 3.3 & 3.5 PRO iOS - Multiple Web Vulnerabilities Date: ===== 2013-05-04 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=939 VL-ID: ===== 939 Common Vulnerability Scoring System: ==================================== 5.9 Introduction: =============...

cmseasy{easy through CMS}v5. 5 arbitrary file upload vulnerability in the simple analysis of reference using the method-vulnerability warning-the black bar safety net

Yesterday found someone storm out of a cmseasy v5. 5 arbitrary file upload vulnerability, it also comes with the exp. Exploit the vulnerability can directly Upload a webshell and other malicious files, the harm is huge and currently the official has not been any patches here to do some simple...

金蝶网站可执行任意命令，root权限

简要描述： 金蝶网站可执行任意命令，root权限。 详细说明： 金蝶网站用户登录的地方http://id.kingdee.com/存在命令执行漏洞，借助struts2的私有变量class.classLoader.jarPath可以执行任意命令（并且是root权限），很可能获得webshell（当然我没有尝试获取），进而可能威胁到用户的数据安全。因为是以root权限执行任意命令，可获得服务器完全控制权，并且可能以这台服务器为跳板威胁周围其它服务器的安全。 漏洞证明： 用IE浏览器访问如下链接：...

MoinMoin - Arbitrary Command Execution

!/usr/bin/env python -- coding: utf-8 -- ascii = '\x1b1;31m' ascii +=' \r\n' ascii +=' ██████████ ██████ ███ ███ ███ ██████████ ████████ ███ ███████ \r\n' ascii +=' ███████████ ████████ ███ ████ ███ ███████████ ████████ ███ ███████ \r\n' ascii +=' ██▒ ██▒ ██▒ ██▒ ███ ██▒ ██▒█▒███ ██▒ ██▒ ██▒ ██▒...

MoinMoin - Arbitrary Command Execution

MoinMoin - Arbitrary Command Execution !/usr/bin/env python -- coding: utf-8 -- ascii = '\x1b1;31m' ascii +=' \r\n' ascii +=' ██████████ ██████ ███ ███ ███ ██████████ ████████ ███ ███████ \r\n' ascii +=' ███████████ ████████ ███ ████ ███ ███████████ ████████ ███ ███████ \r\n' ascii +=' ██▒ ██▒ ██...

File Lite 3.3 & 3.5 PRO iOS - Multiple Web Vulnerabilities

Document Title: =============== File Lite 3.3 & 3.5 PRO iOS - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=939 Release Date: ============= 2013-05-04 Vulnerability Laboratory ID VL-ID: ====================================...

Hornbill Supportworks ITSM 1.0.0 - SQL Injection

Summary SQL Injection Vulnerability in ITSM component of Hornbill Supportworks Application CVE number: CVE-2013-2594 Impact: High Vendor homepage: http://www.hornbill.com Vendor notified: 19/11/2012 Vendor response: This issue has reportedly been fixed but the vendor refused to give version...

亿中邮（亿邮）信息技术官方网站沦陷,已成功进入后台

简要描述： 今天本身没事。为了不让他买叫我盲打王。 所以就打算随便找一个厂商 进行一次 脚本入侵。然后就找到了“亿中邮信息技术” 我大概说一下。没拿下webshell 后台设置了禁止写入。包括数据库备份 根本不可能。另外上传页面直接删除掉了。 但是你们网站的问题很大。 整个入侵过程一共是 20分钟。你们后台就沦陷了！·下面我大概讲一下入侵的整个思路 详细说明： 首先是网站主站有个意见反馈。然后我就很随意的 插入代码了。但是。返回的提交成功 一看就知道 dedecms页面。 然后我就知道。肯定是 失败的。 然后打开data/admin/ver.txt 发现版本很老啊。...

ThinkSNS开发的微博程序存在过滤不严

简要描述： 存在上传文件过滤不严漏洞！可直接上传ASP，PHP等网马后纂名的文件！ 详细说明： 存在上传文件过滤不严，可直接上传危险后纂名文件！ 漏洞证明： 上传WEBSHELL以后，...

用友管理员信息泄露可获得shell

简要描述： 用友官网可注入得到管理员信息，虽然本站找不到后台,但是通过社工可获得其他站点的shell. 详细说明： 此后台拿webshell的方法很多，很多都可行···· 漏洞证明：...

齐博cms后台 数据库工具处过滤不严格导致能写入一句话木马

简要描述： 假如你的账户密码泄露了 那你就危险了 在后台能直接拿webshell 详细说明： 后台为方便站长有个数据库工具 在哪里执行 Select '' into outfile 'F:/wwwroot/shiyanshi/cache/1.asp'; 就写入了一句话木马 然后就可以任意作为了 漏洞证明：...

ShopEX官方网站及旗下ECSHOP官方网站高危漏洞

简要描述： 域名反查www.shopexdrp.cn，发现ShopEX官方子网站、及ecshop官方网站等都在同一台服务器上，其中www.shopexdrp.cn使用dedecms，利用该CMS注入漏洞，可拿到webshell，同服务上的众多官方子网站及旗下网站被控制。 详细说明： 利用dedecms sql注入漏洞：...

[JSQL v0.3] Java Tool for Automatic Database Injection

jSQL Injection is a lightweight application used to find database information from a distant server. jSQL is free, open source and cross-platform Windows, Linux, Mac OS X, Solaris. Version 0.2 features: GET, POST, header, cookie methods normal, error based, blind, time based algorithms automatic...

AirDrive HD 1.6 Shell Upload

Title: ====== AirDrive HD 1.6 iPad iPhone - Multiple Web Vulnerabilities Date: ===== 2013-02-24 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=865 VL-ID: ===== 865 Common Vulnerability Scoring System: ==================================== 6.3 Introduction: =============...

AirDrive HD 1.6 iPad iPhone - Multiple Vulnerabilities

Title: ====== AirDrive HD 1.6 iPad iPhone - Multiple Web Vulnerabilities Date: ===== 2013-02-24 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=865 VL-ID: ===== 865 Common Vulnerability Scoring System: ==================================== 6.3 Introduction: =============...

Check the shell to find the new hidden Trojan horse ideas-vulnerability warning-the black bar safety net

Help a friend search webshell small mind Today a friend said his station has an exception, asked me to look at, the Qi of the whole Station. Checked under the webshell, find a 2 bar. Where there is a possession much more wonderful, at least I haven't seen the way, ignorant of it, unfortunately...

SiteServer CMS UserCenter/login. aspx page the user name at sql injection-vulnerability warning-the black bar safety net

After testing spike the latest of the 3. Version 5 stieserver official website:www. siteserver. cn EXP: Direct access to the UserCenter/login. aspx The username at the input: 1 2 3'insert into bairongAdministratorUserName,Password,PasswordFormat,PasswordSalt...

DEXTUpload filter is not strict lead to any uploaded file for the webshell permissions-bug warning-the black bar safety net

DEXTUpload filter is not strict lead to any uploaded file for the webshell permissions Detailed description: ! The first option one can upload the gif image,properly uploaded,spying on function of whether you can complete the upload ! Upload it,don't know pass? So I just upload when the time to r...

8 ways siteserver background getwebshell and safety recommendations-vulnerability warning-the black bar safety net

First: stencil management to directly modify the file source code can be obtained webshell Second: editor vulnerability http://demo2.siteserver.cn/siteserver/TextEditor/fckeditor/ can get webshell Third: stencil add actually have add asp to the aspx file the template in webshell Fourth: the page...