WDCP后台的登录IP可被伪造

简要描述： 据说可以让名字或ID,永久驻留wdcp的手册里 详细说明： 本漏洞台词方法灵感等部分or均来自 ksc 前辈某个漏洞的描述 （=感觉我厚脸皮呀=） 我不知道要不要这样说明一下噢，如果不需要的话，管理大大删掉这三段呗 获取用户ip的时候 使用了信息 X-Forwarded-For 假如仅仅是提示用户的地方使用的此信息，则问题不是很严重 若其他地方有基于ip地址做安全校验的地方就修改下代码吧 首先，在一些改X-Forwarded-For的插件里面，改自己想要的IP，比如9.9.9.9 然后登录 漏洞证明：...

wdcp X-Forwarded-For injected vulnerability analysis-vulnerability warning-the black bar safety net

Originally this article want and on the article written together, but because of Bad typography will further write this post. 1 3 years of vulnerability, the Internet also does not have this vulnerability details this vulnerability to use the tool, so hold learning mentality, try to analyze it. 0...

DEBIAN-CVE-2014-9494

RabbitMQ before 3.4.0 allows remote attackers to bypass the loopbackusers restriction via a crafted X-Forwareded-For header...

CVE-2014-9494

RabbitMQ Server prior to version 3.4.0 is vulnerable to a security bypass where an attacker can bypass the loopback_users restriction by sending a crafted X-Forwarded-For header. Affected product: RabbitMQ server (up through 3.3.x). Root cause: improper handling of the X-Forwarded-For header allo...

CVE-2014-6230

WP-Ban plugin before 1.6.4 for WordPress, when running in certain configurations, allows remote attackers to bypass the IP blacklist via a crafted X-Forwarded-For header...

Design/Logic Flaw

WP-Ban plugin before 1.6.4 for WordPress, when running in certain configurations, allows remote attackers to bypass the IP blacklist via a crafted X-Forwarded-For header...

CVE-2014-6230

CVE-2014-6230 affects the WordPress WP-Ban plugin, prior to version 1.6.4. The vulnerability arises because the plugin takes the IP address from the X-Forwarded-For header when configured in certain environments, bypassing the plugin’s IP blacklist. This allows remote attackers to bypass bans if ...

CVE-2014-6230

WP-Ban plugin before 1.6.4 for WordPress, when running in certain configurations, allows remote attackers to bypass the IP blacklist via a crafted X-Forwarded-For header...

UFONet - DDoS attacks via Web Abuse (XSS/CSRF)

UFONet - is a tool designed to launch DDoS attacks against a target, using 'Open Redirect' vectors on third party web applications, like botnet. See this links for more info: - CWE-601:Open Redirect - OWASP:URL Redirector Abuse Main features: --version show program's version number and exit -v,...

WordPress WP-Ban 1.62 Bypass Vulnerability

WordPress WP-Ban plugin version 1.62 suffers from a bypass vulnerability when a properly minted X-Forwarded-For header is used. Details ================ Software: WP-Ban Version: 1.62 Homepage: http://wordpress.org/plugins/wp-ban/ Advisory report:...

WordPress WP-Ban 1.62 Bypass

Details ================ Software: WP-Ban Version: 1.62 Homepage: http://wordpress.org/plugins/wp-ban/ Advisory report: https://security.dxw.com/advisories/vulnerability-in-wp-ban-allows-visitors-to-bypass-the-ip-blacklist-in-some-configurations/ CVE: CVE-2014-6230 CVSS: 5 Medium;...

pageadmin注入漏洞

简要描述： rt 详细说明： 管理员登陆处。 获得管理员登陆ip并记录，获得ip方式有问题。 x-forwarded-for注入。 http://bbs.pageadmin.net/showtopic-28377.aspx 20140415 本机测试，X-FORWARDED-FOR:8.8.8.8','20140721'; select from pamember where @@version0 -- 。 官网,demo改了登陆url. /e/master/login.aspx 看ilspy里面的PageAdmin...

kppw威客系统SQL注入一枚

简要描述： rt 详细说明： 注册处。 function checkall$regusername, $regemail, $regcode global $lang,$K; $res1 = $this-checkip ; if$K'do' $url = 'index.php?do='.$K'do'; else $url = 'index.php?do=register'; $res1 === true or $result = $res1; $res2 = $this-checkusername $regusername ; $res2 === true or $result =...

Admbook <= 1.2.2 (X-Forwarded-For) Remote Command Execution Exploit

No description provided by source. !/usr/bin/perl -w use IO::Socket; print \r\n; print | Admbook =1.2.2 X-Forwarded-For cmmnds xctn xploit |\r\n; print | By rgod rgodATautisticiDOTorg |\r\n; print | site: http://retrogod.altervista.org |\r\n; print | |\r\n; print | Sun-Tzu: \Rouse him, and learn...

FusionPHP Fusion News 3.3/3.6 X-ForwordedFor PHP Script Code Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/13661/info FusionPHP Fusion News is prone to a remote PHP code injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. This may facilitate unauthorized access. ...

Jojo CMS X-Forwarded-For header SQL injection vulnerability-vulnerability warning-the black bar safety net

Affected system: Jojo CMS Jojo CMS 1.2.2 Description: -------------------------------------------------------------------------------- BUGTRAQ ID: 5 9 9 3 4 CVECAN ID: CVE-2 0 1 3-3 0 8 1 Jojo CMS is SEO-friendly, scalable, PHP-based CMS. Jojo CMS 1.2.2 previous version, the...

Sql injection

SQL injection vulnerability in the checkEmailFormat function in plugins/jojocore/classes/Jojo.php in Jojo before 1.2.2 allows remote attackers to execute arbitrary SQL commands via the X-Forwarded-For HTTP header to /articles/test/...

TRSWCM 后台权限绕过以及GETSHELL漏洞

简要描述： TRS WCM大于v6版本中存在此漏洞，v5.X版本不存在。无需登录。 详细说明： 注：该漏洞目前影响大量站点，担心厂商忽略导致漏洞细节提前曝光，请管理员同学转至cncert国家互联网应急中心进行处理，多谢。 在/WEB-INF/web.xml中代码如下： govcontroller com.trs.webframework.controler.servlet.NoLoginServiceControler AllowIP 127.0.0.1 CurrUser admin RedirectURI /center.do govcontroller /govcenter.do...

CmsEasy最新版本无限制SQL注射

简要描述： 版本号：CmsEasy 55020140420UTF8，SQL注射，程序员过于追求完美时，会忽略那些值得珍惜的人或事，比如女朋友（会有么?），比如这一处代码... 详细说明： /lib/default/useract.php 326行左右，及/lib/tool/frontclass.php 541行左右，有对ip是否正确的判断： if!pregmatch'/^0-9|1-90-9|10-92|20-40-9|250-5.30-9|1-90-9|10-92|20-40-9|250-5$/',...

YouYax论坛SQL注入漏洞

简要描述： 代码审计之SQL注入，针对这个严谨的厂商，有注入绝不能忍啊，必须是高啊。而且其他都做了addsalsh ，这个是漏的 详细说明： 问题出在register.php文件中 先说fuzz时候是怎么发现的 注册用户的时候发现在第二次注册会给出提醒 alert'注册失败，该IP地址已经使用超过了1次†'; 于是想着用XFF能不能绕过，果断添加X-Forwarded-For字段，就绕过了 然后在X-Forwarded-For这里，修改ip地址为1.1.1.1' and 1=1等等， 测试均成功，由此判断这里肯定是个注入，只不过是个盲注，在外面测试不太方便就没跑库 于是去看源码 关键代码...