Z-BlogPHP Cross-Site Scripting Vulnerability

Z-BlogPHP is an open source PHP-based blogging system developed by the Z-Blog community. A cross-site scripting vulnerability exists in Z-BlogPHP version 1.5.1.1740. A remote attacker can exploit this vulnerability to inject arbitrary Web script or HTML...

CVE-2018-7736

In Z-BlogPHP 1.5.1.1740, cmd.php has XSS via the ZCBLOGSUBNAME parameter or ZCUPLOADFILETYPE parameter. NOTE: the software maintainer disputes that this is a vulnerability...

PT-2018-18247 · Z Blogphp · Z-Blogphp

Name of the Vulnerable Software and Affected Versions: Z-BlogPHP version 1.5.1.1740 Description: There is a reported issue in Z-BlogPHP where the cmd.php file is susceptible to XSS attacks via the ZC BLOG SUBNAME parameter or the ZC UPLOAD FILETYPE parameter. However, the software maintainer...

Z-BlogPHP Information Disclosure Vulnerability

Z-BlogPHP is an open source PHP-based blogging system developed by the Z-Blog community. A security vulnerability exists in Z-BlogPHP version 1.5.1. A remote attacker can exploit the vulnerability by sending a direct request to the zbsystem/function/lib/upload.php file to obtain the full path...

Z-BLOG Blind-XXE造成任意文件读取

No description provided by source...

Z-BLOG Blind-XXE Arbitrary File Read Vulnerability

Z-Blog is developed by RainbowSoft Studio a Blog program based on the Asp platform . Z-Blog has an arbitrary file read vulnerability. /zbsystem/xml-rpc/index.php directly call simpleloadstring parsing XML, resulting in XML entity injection, an attacker can read system files using the vulnerabilit...

Z-blog at the front Desk without signing in contains a vulnerability a gold-bug warning-the black bar safety net

http://www.zblogcn.com/zblogphp/ download The problem occurs in zbinstall/index. php I also notice a bit after the installation is complete is to write what's prompt The results of the installation Create the database! zblog Connect to the database and create a data table! Create and insert data...

Z-BLOG Blind-XXE result in arbitrary file read vulnerability warning-the black bar safety net

Download the latest version of Z-Blog: http://bbs.zblogcn.com/thread-88670-1-1.html /zbsystem/xml-rpc/index.php 6 4 1 row: $zbp-Load; AddFilterPlugin'FilterPluginZbpShowError','RespondError'; $xmlstring = filegetcontents 'php://input' ; //Logs$xmlstring; $xml = simplexmlloadstring$xmlstring; The...

Z-Blog的php版官方blog存在sql注入（仅仅官方）

简要描述： 操蛋捏 详细说明： 注入地址http://app.rainbowsoft.org/?zba=220 呵呵，好久没法洞了， 漏洞证明：...

Z-Blog旗下DBS主机漏洞可获得客户域名账号密码

简要描述： Z-Blog旗下DBS主机漏洞存在严重的注入漏洞。客户得到所有的域名账号、密码。 详细说明： 1、用的华众的系统，直接看图，查询代码是这样写的。 2、嘎嘎，注册个会员【te】搞定。决定是超另类的注入。登陆后，点击域名管理： 查询语句就变成了 ufatstr like '%,te,%' 漏洞证明：...

Z-Blog is a PHP version of the three low-permission to admin POST injection-vulnerability warning-the black bar safety net

Brief description: Register a reviewer account will be able to note to the administrator Detailed description: Wood have found you accept the POST variables of the function in which 所以 认为 问题 出 在 /zbsystem/function/lib/dbsql.php public function ParseWhere$where global $zbp; $sqlw=null; if!...

Z-Blog php Edition front regular SQL blind injection vulnerability-vulnerability warning-the black bar safety net

Brief description: The second...also a bit puzzled want to ask your developer Detailed description: The problem /zbsystem/function/csystemcommon.php function GetVars$name,$type='REQUEST' if $type=='ENV' $array=&$ENV; if $type=='GET' $array=&$GET; if $type=='POST' $array=&$POST; if $type=='COOKIE'...

Z-Blog PHP版之三低权限管理员POST注入

简要描述： 注册个评论者账号就能注到管理员 详细说明： 木有找到你们接受POST变量的函数在哪，所以认为问题出在/zbsystem/function/lib/dbsql.php public function ParseWhere$where global $zbp; $sqlw=null; if!empty$where $sqlw .= ' WHERE '; $comma = ''; foreach$where as $k = $w $eq=$w0; if$eq=='='|$eq==''|$eq=='LIKE'|$eq==''|$eq=='!=' $x = string$w1; $y ...

Z-Blog的PHP版前台存储型XSS漏洞一

简要描述： 看到你们内测的消息我就屁颠屁颠地跑过来了，花了两个通宵看代码发现几处漏洞.. 这里先绕过了你们XSS过滤脚本.. 详细说明： 问题出在 /zbsystem/function/csystemcommon.php function TransferHTML$source,$para ifstrpos$para, 'nohtml'!==false $source=pregreplace"//si","",$source; ifstrpos$para, 'noscript'!==false $source=pregreplace"/.?/si","",$source;...

Z-Blog的php版前台正则SQL盲注漏洞

简要描述： 第二发...另外有点疑惑想问下你们的开发 详细说明： 问题出在 /zbsystem/function/csystemcommon.php function GetVars$name,$type='REQUEST' if $type=='ENV' $array=&$ENV; if $type=='GET' $array=&$GET; if $type=='POST' $array=&$POST; if $type=='COOKIE' $array=&$COOKIE; if $type=='REQUEST' $array=&$REQUEST; if $type=='SERVER'...

Z-blog程序存在反射性XSS漏洞,影响1.8版本~

简要描述： 貌似听朋友说,剑心蝈蝈看到小厂商的XSS是审核不过的,所以我尴尬了,今天研究博客的时候无意发现了Z-blog博客存在的一个小XSS,在引用地址这里,试了试可以! 详细说明： 官方试了一下,可以弹, http://download.rainbowsoft.org/cmd.asp?act=gettburl&id=104%22%3E%3Cimg%20src=1%20onerror=alert1;%3E 然后GG一下 inurl:cmd.asp?act=gettburl&id= 先拿俩试试吧...

Z-BLOG V1.8 cmd.asp 跨站漏洞

No description provided by source...

z-blog 1.8 wap pages cell phone search at the SQL injection vulnerability and fix-vulnerability warning-the black bar safety net

具体 页面 请 查看 http://bbs.rainbowsoft.org/thread-65778-1-1.html 2 0 1 2 年 1 月 9 日 to update the record Important update 1, repair cell phone search atSQL injectionvulnerabilities, to give us the security risks are very sorry. Please update the compressed package of the FUNCTION/csystemwap. asp file...

Z-blog 1.8 web path information disclosure vulnerability and fix-vulnerability warning-the black bar safety net

Affected version: Z-blog 1.8 Vulnerability description: Z-blog is based on Asp platform Blog blogweblogprogram Z-blog using the default editor there is a path information disclosure vulnerability Test method:...

Z-blog 1.8 web路径信息泄露漏洞

Z-blog是基于Asp平台的Blog博客网志程序 Z-blog使用的默认编辑器存在路径信息泄露漏洞 Z-blog 1.8 厂商补丁： Z-blog ------- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.rainbowsoft.org/ http://www.ssvdb.com/admin/FCKeditor/editor/dialog/fckspellerpages/spellerpages/server-scripts/spellchecker.php...