ECshop 代码问题漏洞

ShopeX ECShop is an open source mall system of the Chinese business school ShopeX company . Support PC + H5 + APP + small program mall , source code free download experience , suitable for enterprise development and build mall . ECshop 4.1.8 and previous versions of the code problem vulnerability...

Revenue Collection System 安全漏洞

Revenue Collection System is a land property billing and payment software by Carlo Montero Individual Developer. A security vulnerability exists in Revenue Collection System version v1.0 that stems from improper access control of its /admin/DBbackup/ component allowing an unauthenticated attacker...

PT-2019-18584

Name of the Vulnerable Software and Affected Versions PHPMyWind version 5.5 Description An issue in PHPMyWind allows remote attackers to delete arbitrary folders. This is achieved through the "admin/database backup.php" API endpoint with specific parameters, including action=import, dopost=deldir...

PT-2018-14545 · Phpyun · Phpyun

Name of the Vulnerable Software and Affected Versions: PHPYun version 4.6 Description: A security issue was found in PHPYun, where a vulnerability allows the deletion of any file or directory. This is possible due to the mishandling of the sql parameter by the del action function in the...

Subrion CMS SQL Injection Vulnerability

Subrion CMS is a PHP-based content management system CMS developed by the Subrion team. The system can be integrated into a website and supports a wide range of extensions plug-ins and more. A SQL injection vulnerability exists in the admin/database/ URI in Subrion CMS version 4.0.5.10. A remote...

Sql injection

Subrion CMS 4.0.5.10 has SQL injection in admin/database/ via the query parameter...

CVE-2017-6013

Subrion CMS 4.0.5.10 has SQL injection in admin/database/ via the query parameter...

CVE-2017-6013

Subrion CMS 4.0.5.10 has SQL injection in admin/database/ via the query parameter...

CVE-2017-6013

Subrion CMS 4.0.5.10 is affected by an SQL injection in the admin/database/ URI via the query parameter. The vulnerability enables arbitrary SQL execution (impact: confidentiality, integrity, and availability can be affected). Documented in NVD/CNVD entries for CVE-2017-6013; no patch/version rem...

PT-2017-16831

Name of the Vulnerable Software and Affected Versions Subrion CMS version 4.0.5.10 Description The issue concerns SQL injection in the admin/database/ endpoint via the query parameter. Recommendations For Subrion CMS version 4.0.5.10, update to a newer version that contains a fix for this issue...

CVE-2017-6013: Improper Neutralization of Special Elements used in an SQL Command

Subrion CMS 4.0.5.10 has SQL injection in admin/database/ via the query parameter...

cmseasy官方演示站某漏洞获取webshell

简要描述： csrf+lfi拿下shell 详细说明： 1.这里直接进数据库了，没有判断路径是否跳出了templete目录的问题 2.然后利用这一点，我们可以构造如下页面，诱惑管理员访问： 3.官方演示站，我们可以直接用测试帐号登录，然后点击这个页面 当然也可以手动去后台添加 （官方下载的5.5版本，安装好之后自动带有两个自定义表单，无需管理员手动添加，我就利用了其中一个）： 4.其数据包如下： 5.提交后访问如下页面即可获得shell（无需登陆） test1站的shell...

AST-2007-026 - SQL Injection issue in cdr_pgsql

Asterisk Project Security Advisory - AST-2007-026 +------------------------------------------------------------------------+ | Product | Asterisk | |----------------------+-------------------------------------------------| | Summary | SQL Injection issue in cdrpgsql |...