Xiuno BBS 2.0 background getshell vulnerabilities-vulnerability warning-the black bar safety net

Author: ztz@Dis9Team 0×0 vulnerability overview 1. The system configuration is not stored in the database, but stored in the conf. php; 2. Use the array method to store; 3. Have escape: ‘ = \’ ; 4. The ‘\’without escaping; 5. Insert the\’will be escaped as\\’php\ \ \represents one, and single...

SynConnect PMS - SQL Injection Vulnerability

Exploit for php platform in category web applications Synchroweb Technology is a provider of application software, hardware and other innovative enterprise technology. They strive in development, deployment, and management of Linux and open source solutions for Internet infrastructure ranging fro...

TP-Link TL-WR740N Wireless Router - Denial of Service

TP-Link TL-WR740N Wireless Router - Denial of Service !/usr/local/bin/perl TP-Link TL-WR740N Wireless Router Remote Denial Of Service Exploit Vendor: TP-LINK Technologies Co., Ltd. Product web page: http://www.tp-link.us Affected version: - Firmware version: 3.16.4 Build 130205 Rel.63875n...

TP-Link TL-WR740N Wireless Router Remote Denial Of Service

The TP-Link WR740N Wireless N Router network device is exposed to a remote denial of service vulnerability when processing a HTTP request. This issue occurs when the web server httpd fails to handle a HTTP GET request over a given default TCP port 80. Sending a sequence of three dots ... to the...

TP-Link TL-WR740N Wireless Router Remote Denial Of Service

!/usr/local/bin/perl TP-Link TL-WR740N Wireless Router Remote Denial Of Service Exploit Vendor: TP-LINK Technologies Co., Ltd. Product web page: http://www.tp-link.us Affected version: - Firmware version: 3.16.4 Build 130205 Rel.63875n Released: 2/5/2013 - Hardware version: WR740N v4 00000000...

Booking System Pro - Cross-Site Request Forgery

Exploit Title: Booking System Pro CSRF Vulnerability Date: 28/08/2012 Author: DaOne @LibyanCA Vendor: http://www.neptunescripts.com/products Price: $39 CSRF Add Admin...

CVE-2012-2326

Cross-site scripting XSS vulnerability in the Admin Control Panel ACP in MyBB aka MyBulletinBoard before 1.6.7 allows remote administrators to inject arbitrary web script or HTML via a malformed file name in an orphaned attachment...

CVE-2012-2325

SQL injection vulnerability in the User Inline Moderation feature in the Admin Control Panel ACP in MyBB aka MyBulletinBoard before 1.6.7 allows remote administrators to execute arbitrary SQL commands via unspecified vectors...

CVE-2012-2324

Multiple SQL injection vulnerabilities in MyBB aka MyBulletinBoard before 1.6.7 allow remote administrators to execute arbitrary SQL commands via unspecified vectors in the 1 user search or 2 Mail Log in the Admin Control Panel ACP...

Sql injection

Multiple SQL injection vulnerabilities in MyBB aka MyBulletinBoard before 1.6.7 allow remote administrators to execute arbitrary SQL commands via unspecified vectors in the 1 user search or 2 Mail Log in the Admin Control Panel ACP...

Sql injection

SQL injection vulnerability in the User Inline Moderation feature in the Admin Control Panel ACP in MyBB aka MyBulletinBoard before 1.6.7 allows remote administrators to execute arbitrary SQL commands via unspecified vectors...

Cross site scripting

Cross-site scripting XSS vulnerability in the Admin Control Panel ACP in MyBB aka MyBulletinBoard before 1.6.7 allows remote administrators to inject arbitrary web script or HTML via a malformed file name in an orphaned attachment...

CVE-2012-2325

SQL injection vulnerability in the User Inline Moderation feature in the Admin Control Panel ACP in MyBB aka MyBulletinBoard before 1.6.7 allows remote administrators to execute arbitrary SQL commands via unspecified vectors...

CVE-2012-2324

Multiple SQL injection vulnerabilities in MyBB aka MyBulletinBoard before 1.6.7 allow remote administrators to execute arbitrary SQL commands via unspecified vectors in the 1 user search or 2 Mail Log in the Admin Control Panel ACP...

CVE-2012-2326

Cross-site scripting XSS vulnerability in the Admin Control Panel ACP in MyBB aka MyBulletinBoard before 1.6.7 allows remote administrators to inject arbitrary web script or HTML via a malformed file name in an orphaned attachment...

CVE-2012-2326

MyBB Admin Control Panel (ACP) contains a Cross-site Scripting (XSS) vulnerability (CVE-2012-2326) affecting

Babbsacks babbiges Board 2.8 Full Multiple Vulnerabilites

Exploit for php platform in category web applications Exploit Title: Babbsacks babbiges Board 2.8 Full Multiple Vulnerabilites Date: 12/08/2012 Author: GoLdM Vendor or Software Link: http://sourceforge.net/projects/babb/ Category:: Local File Disclosure + Arbitrary Delete + File Overwrite Google...

abcms 1.0 app/controller/admincp.php登录绕过漏洞

No description provided by source...

NetBill Billing System 1.2 CSRF / XSS

Title: ====== NetBill Billing System v1.2 - Multiple Web Vulnerabilites Date: ===== 2012-05-11 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=560 VL-ID: ===== 560 Common Vulnerability Scoring System: ==================================== 3.5 Introduction: =============...

Zen-Cart 1.3.9h Cross Site Request Forgery

Advisory Information Title: Zen-Cart Admin CSRF/XSRF - Delete / Disable Products Date published: 2012-02-10 01:59:45 AM upSploit Ref: UPS-2011-0018 CVE REF: CVE-2011-4403 Advisory Summary An attacker can force an administrator to delete or disable products from within his store. Vendor Zen-Cart...