Dig Emperor Management Platform security vulnerabilities-vulnerability warning-the black bar safety net

Official website: 1, demo Station background turned out to have a place to upload pictures, does not prohibit the upload. 2, the upload image simple filtration, easy to break, Upload a php file, and can be executed. 3, the servervpsconfiguration severe lower, get a webshell directly after is a...

Kingtop content management software injection 0day vulnerabilities and fixes-vulnerability warning-the black bar safety net

System name: Kingtop content management software System version: all versions Vulnerability found by: Akast N. S. T Security team: Neuron Security Team Vulnerability type: SQL injection Vulnerability file:/news/index. aspx Vulnerability variable: MenuID Software type: business software Developmen...

WanHu ezEIP 2. 0 injection vulnerability 0day-vulnerability warning-the black bar safety net

System name: WanHu ezEIP System version: 2.0 Vulnerability found by: Akast N. S. T Security team: Neuron Security Team Vulnerability type: SQL injection Vulnerability file:/caseinfo. asp Vulnerability variable: Newid=1&cid=1 Software type: business software Development company: Guangzhou million...

WanHu ezEIP 2.0 injection vulnerability and fix-vulnerability warning-the black bar safety net

Vulnerability author: akast Detailed description: Vulnerability file:/caseinfo. asp Vulnerability variable: Newid=1&cid=1 Software type: business software Vulnerability Description: The You can use the injection vulnerability to get the site administrator permissions, so you can login to the...

Analysis of the postgresql database attack techniques II-vulnerability warning-the black bar safety net

You can see we broke up in a field for the name, then we continue incrementing the offset value, to obtain the other field, as shown in Figure 9 and 1=2 union select 1,columnname,'3','4' from informationschema. the columns where tablename='admins' offset 2 limit 1-- ! Figure 9 Field passowrd is...

For JBoss vulnerability to obtain Webshell-vulnerability warning-the black bar safety net

JBoss is a large application platform, ordinary users is difficult to come into contact with. The more difficult to contact something the more I advanced, to borrow a Beijing bus driver Lee su Li of the word“force can only dry out the incompetent, hard to dry out outstanding”, in security is also...

Old Y article management system default database-vulnerability-vulnerability warning-the black bar safety net

Keywords: Powered by laoy8! Words for a sister to say that she has a article blog, for a moment, heart starting to see is a sprinkle system, The results of a look at the old Y, ASP! Apart from anything else directly sweeping the injection, can be swept for a long time is not injection point of...

Hishop(latest edition) 5.4&5.4.1 SQL Injection Exploit[0day]-vulnerability warning-the black bar safety net

hishop since 0 9 in 5.1 and 5. 1. 3 explosion over the vulnerability after it didn't burst. Some time ago, looked under, to find an injection point, but the statement is a bit complex and also filter the underlined table name which has an underscore, so need special configuration, This injection...

dedecms 5.7 the background to get SHELL vulnerability-vulnerability warning-the black bar safety net

| dedecms 5.7 teach the previous version has been greatly improved, Repair the 5. 6 The following version serious uploaded 0day; and Quite tasteless, the premise is to have background permissions. Since the system comes with a file Manager Plug-In does not filter the file upload and after editing...

DEDECMS vulnerability 0day member\index_do. php-vulnerability warning-the black bar safety net

Published author: the mind Affected versions: dedecms Official website: http://www.dedecms.com Vulnerability type: design error Vulnerability description: Vulnerability code: member\indexdo.php else if$fmdo=='login' // http://127.0.0.1/member/indexdo.php?fmdo=login&dopost=login came to this step...

osCommerce 2.3.1 (banner_manager.php)remote file upload vulnerability-vulnerability warning-the black bar safety net

osCommerce is an open source eCommerce program, osCommerce 2.3. 1 bannermanager. php file upload vulnerability can lead an attacker directly access the webshell on. +info: osCommerce 2.3.1 bannermanager.php Remote File Upload Vulnerability Google Dork: powered by oscommerce we will automatically...

Discuz! NT 3.1.0 后台拿webshell

简要描述： 通过后台写入执行代码，直接拿到webshell，从而掌握服务器权限。 详细说明： 1、访问http://127.0.0.1/admin/global/globaltemplatesedit.aspx?path=../tools/&filename=rss.aspx&templateid=1&templatename=Default，写入aspx木马。 2、写入aspx木马后，访问http://127.0.0.1/tools/rss.aspx就可以了。 漏洞证明：...

Discuz! NT 3.1.0 后台拿webshell

简要描述： 通过后台写入aspx木马，直接拿到webshell，然后获取整个服务器权限。 详细说明： 1、访问http://127.0.0.1/admin/global/globaltemplatesedit.aspx?path=../tools/&filename=rss.aspx&templateid=1&templatename=Default，写入aspx木马。 2、写入aspx木马后，访问http://127.0.0.1/tools/rss.aspx就可以了。 漏洞证明：...

DZ-X1. 5 Forum latest backstage get WebShell-vulnerability warning-the black bar safety net

Discuz! X is Kang Sheng Chong want Comsenz launch of a community-based professional jianzhan platform, Forum, BBS, the personal space of SNS, the portal（Portal）, group Group, application of open platform the Open Platform for full integration in one, help website realize one-stop service. Look...

ShopEx V4. 8(v4. 8 4,v4. 8 5) the background write WebShell-vulnerability warning-the black bar safety net

ShopEx online store system sales platform, is one of the earliest online shop software provider; is currently the shop system continued research and development of the oldest of the company; is currently the shop software domestic the highest market share of the software provider; is currently th...

Every day buy system of 0DAY-vulnerability warning-the black bar safety net

Author:mind =========================================== Also is that sentence to finally be able to get a WEBSHELL are collectively 0DAY o∩∩o ha ha Classic white look at the code The first is the local contains ajax.php requireonce MODPATH.$ this-SetEvent$config'defaultmodule'.'. mod.php'; //look...

Concave Yaya news publishing system ACC version SQL Edition latest through the kill injection 0day-vulnerability warning-the black bar safety net

Use code: javascript:alertdocument. cookie="BigClassName="+escape"%2 5' and 1=2 union select 1,admin,3,password,5,6,7,8,9,1 0,1 1,1 2,1 3 from admin where 1=1 and 'a'='a"; Open thepage, then in the first page of the IE address bar above the use of the code, and then access the? Page refresh time,...

Discuz! 2 0 1 1 All version background get Webshell 0day-vulnerability warning-the black bar safety net

From Discuz! Ancient 6. 0 version, the vulnerabilities are present in the extensions, use differently, the following start. A Discuz! 6.0 and Discuz! 7.0 Since you want the background to take the Shell, the file is written to Must-see. /include/cache.func.php ! To turn on,find the calling functio...

FeiXun enterprise website management system v2011 upload vulnerabilities pass to kill 0day-vulnerability warning-the black bar safety net

Affected version: v2011 Official website: http://www.webhtm.cn PRODUCT DESCRIPTION: Suitable Agent building a Business Site of the enterprise source code, The aspect of the practical! Program description: 1. Features: simplified and Traditional Chinese switch, the product display system, news...

Rain Joe(YuQa)Network Information feedback system YuQaIFS V1. 0 vulnerability 0day and fix-vulnerability warning-the black bar safety net

Publishing author: f4tb0y Affected versions: YuQaIFS V1. 0 Vulnerability type: design flaw Vulnerability Description: a vulnerability in the file is YuQaIFSSave. the asp directly to the submitted data is written to the database, without any filtering. 主页 面 www.xxx.com/xx/index.asp（xx for this...