2719 matches found
74cms某功能注入漏洞（有条件）
简要描述： 略鸡肋,分享出来。 详细说明： 最新版v3.4，更新时间20140310 文件/plus/weixin.php responseMsg函数，使用 $postStr = $GLOBALS"HTTPRAWPOSTDATA"; 获得了post数据。所以，可以无视GPC。 获得的数据是XML格式，我们一会发送数据包即可。 继续看该函数： if !empty$postStr $postObj = simplexmlloadstring$postStr, 'SimpleXMLElement', LIBXMLNOCDATA; $fromUsername =...
McAfee Web Gateway User Interface Default Credentials
The remote McAfee Web Gateway user interface uses a known set of default credentials. Knowing these, an attacker with access to service can gain administrative access to the device. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if...
Ring Jordan SQL Injection Vulnerability
Ring Jordan suffers from a remote SQL injection vulnerability in their administrative functionality. The author has tried to contact the vendor and has received no response. The SQL injection issue allows for authentication bypass. RINGJORDAN SQL Injection Time-Line...
LiveZilla < 5.1.1.0 Multiple Vulnerabilities
The version of LiveZilla hosted on the remote web server is affected by multiple vulnerabilities : - The application saves admin login details in a 1 click XML file. This allows a local attacker to obtain admin login credentials. CVE-2013-6223 - The application is affected by multiple cross-site...
RASPcalendar 1.01 SQL Injection
--------------------------------------------------- RASPcalendar 1.01 ASP Admin Login Vlunerabilities --------------------------------------------------- Author : Hackeri-AL Date : 06-11-2013 Vendor Homepage : http://www.rttucson.com/files.html Software link :...
RASPcalendar 1.01 - Admin Login bypass Vulnerability
Exploit for asp platform in category web applications --------------------------------------------------- RASPcalendar 1.01 - Admin Login bypass Vulnerability --------------------------------------------------- Author : Hackeri-AL Date : 06-11-2013 Vendor Homepage :...
RASPcalendar 1.01 (ASP) - Admin Login
RASPcalendar 1.01 ASP - Admin Login --------------------------------------------------- RASPcalendar 1.01 ASP Admin Login Vlunerabilities --------------------------------------------------- Author : Hackeri-AL Date : 06-11-2013 Vendor Homepage : http://www.rttucson.com/files.html Software link :...
RASPcalendar 1.01 (ASP) - Admin Login
--------------------------------------------------- RASPcalendar 1.01 ASP Admin Login Vlunerabilities --------------------------------------------------- Author : Hackeri-AL Date : 06-11-2013 Vendor Homepage : http://www.rttucson.com/files.html Software link :...
OpenEMR 4.1.1 Patch 14 SQLi Privilege Escalation Remote Code Execution
This Metasploit module exploits a vulnerability found in OpenEMR version 4.1.1 Patch 14 and lower. When logging in as any non-admin user it's possible to retrieve the admin SHA1 password hash from the database through SQL injection. The SQL injection vulnerability exists in the...
Network fun online shopping system eshop_v6. 7）SQL injection vulnerability-vulnerability warning-the black bar safety net
Brief description: Parameters without any filtered directly into a database query, a malicious attacker can get the admin login username and password Detailed description: ! the web root directory under the price. asp, anid without any filter, the digital-type injection Address:...
VoltEdit CMS SQL Injection Admin Login Bypass & Shell Upload Vulnerability
========================================================================================== VoltEdit CMS SQL Injection Admin Login Bypass & Shell Upload Vulnerability ==========================================================================================...
VoltEdit CMS SQL Injection Admin Login Bypass & Shell Upload Vulnerability
========================================================================================== VoltEdit CMS SQL Injection Admin Login Bypass & Shell Upload Vulnerability ==========================================================================================...
VoltEdit CMS SQL Injection / Shell Upload
========================================================================================== VoltEdit CMS SQL Injection Admin Login Bypass & Shell Upload Vulnerability ==========================================================================================...
74CMS talent system v3. 2 injection and full version pass rounded out the background is attached using the EXP-bug warning-the black bar safety net
Set of procedures filter is still relatively full, but all versions are GBK encoding is his flawed but basically the string into the library when the author used the iconv to convert the submitted over the data encoding into utf8 So the use of wide-character injection there is no way out but the...
MyMarket 1.72 bypass admin login & product_details blind sqli
Exploit for php platform in category web applications Exploit Title: MyMarket 1.72 bypass admin login & productdetails blind sqli Google Dork: intext:"MyMarket version 1.71" Tested on: Linux Bug finder & Exploit Coder:NEt Bomber http://fb.me/net.bomba Beside other sqli exploits found on exploits...
ecshop最新版本SQL注入+存储XSS=任意管理员登录
简要描述： 一个功能点的SQL注入和存储XSS，内含多种技巧，我觉得我就是个艺术家～～ 详细说明： 刚下的ecshop V2.7.3版本～ 1.漏洞存在于站外广告统计功能对应管理后台的报表统计-站外投放JS，即/affiche.php页面，将from参数网站来源referer存储到了数据库表ecsadsense，而在后台的“站外投放JS”读取出来未过滤又进入了sql语句，导致二次注入。 /affiche.php 119行 $sql = "INSERT INTO " . $ecs-table'adsense' . "fromad, referer, clicks VALUES '-1', ...
Smoke Loader LFI / File Deletion
Two other vulnerabilities I forgot to mention, lfi and file deletion via control.php. The user must be logged into the administrative panel. 1. LFI GET http://evilserver.net/control.php?act=dwnshell&file=../../../../etc/passwd Enter username for Who are you? at evilsite.net:80:eviladmin Password:...
0day full - Free Monthly Websites v2.0 - Multiple Web Vulnerabilities
Title: ====== Free Monthly Websites v2.0 - Multiple Web Vulnerabilities Date: ===== 2013-02-04 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=851 VL-ID: ===== 851 Common Vulnerability Scoring System: ==================================== 8.5 Introduction: =============...
Free Monthly Websites 2.0 - Multiple Vulnerabilities
Free Monthly Websites 2.0 - Multiple Vulnerabilities Title: ====== Free Monthly Websites v2.0 - Multiple Web Vulnerabilities Date: ===== 2013-02-04 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=851 VL-ID: ===== 851 Common Vulnerability Scoring System:...
Free Monthly Websites 2.0 - Multiple Vulnerabilities
Title: ====== Free Monthly Websites v2.0 - Multiple Web Vulnerabilities Date: ===== 2013-02-04 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=851 VL-ID: ===== 851 Common Vulnerability Scoring System: ==================================== 8.5 Introduction: =============...