CVE-2018-9923: Cross-Site Request Forgery (CSRF)

An issue was discovered in idreamsoft iCMS through 7.0.7. CSRF exists in admincp.php, as demonstrated by adding an article via an app=article&do=save&frame=iPHP request...

CVE-2018-9924: Improper Neutralization of Special Elements used in an SQL Command

An issue was discovered in idreamsoft iCMS through 7.0.7. SQL injection exists via the pid array parameter in an admincp.php?app=tag&do=save&frame=iPHP request...

PT-2018-19091

Name of the Vulnerable Software and Affected Versions idreamsoft iCMS versions prior to 7.0.8 Description An issue exists where CSRF is present in the admincp.php file. This can be demonstrated by adding an article via the "app=article&do=save&frame=iPHP" request to the "/admincp.php" endpoint,...

CVE-2018-9925: Improper Neutralization of Input During Web Page Generation

An issue was discovered in idreamsoft iCMS through 7.0.7. XSS exists via the nickname field in an admincp.php?app=user&do=save&frame=iPHP request...

PT-2018-19092

Name of the Vulnerable Software and Affected Versions idreamsoft iCMS versions prior to 7.0.8 Description An issue exists in the software where SQL injection is possible. This occurs via the pid array parameter in an "admincp.php?app=tag&do=save&frame=iPHP" request. Recommendations For versions...

Discuz 7.2 admincp.php 反射型 xss漏洞

漏洞描述：Discuz! 7.X系列一处问题引发大面积XSS，基本上全部页面和文件都能触发。Discuz! 7.2,7.1,7.0三个版本都受影响漏洞分析：这里拿Discuz! 7.2做分析比如Discuz! 7.2安装包里面的第二个文件就是ajax.php注意最后一行的showmessage函数，跟进include/global.func.php文件。...

RoseOnlineCMS <= 3 B1 (admin) Local File Inclusion

漏洞出现在modules/admincp.php中 Click here to go back home'; obendflush; ? $admin直接通过GET方式获取 没有经过过滤 后面直接用include包含了 所以在PHP5.3的情况下 可以 通过%00截断 达到任意文件包含 payload http://0.0.0.0/modules/admincp.php?admin=LFI%00 '/ -.- --------------------oOO------OOo------------------- | RoseOnlineCMS = 3 B1 admin Local Fil...

ABCMS news publishing system vulnerabilities and fixes-vulnerability warning-the black bar safety net

// APP/Controller/Admincp.php function actionliulan //Administrator information $nowindex = $GET'page' ? $GET'page' :1; //Get the data query from the first few bars begin to take the data $page = $GET'page' ? $GET'page'-16 : 0; //Query the data $liulan = $this-admin-findAll",'id desc',array6,$pag...

Discuz! v7. 2 injection vulnerability analysis and exploit-vulnerability warning-the black bar safety net

Vulnerability analysis: 文件 ./manyou/sources/notice.php The relevant code: $appid = intval$GET'appid'; $db-query"DELETE FROM $tablepremyinvite WHERE appid='$appid' AND touid='$discuzuid'"; showmessage'manyou:done', 'userapp.php script=notice&action=invite'; elseif$option == 'deluserapp' $hash =...

CVE-2009-4581: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in modules/admincp.php in RoseOnlineCMS 3 B1 and earlier, when magicquotesgpc is disabled, allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the admin parameter...

Discuz! admincp.php xss bug

漏洞存在于文件admin/login.inc.php里$urlforward没有被过滤导致xss漏洞: input type="hidden" name="urlforward" value="$urlforward" 2008-02 www.Discuz.net http://127.0.0.1/discuz/admincp.php?urlforward=%22%3E%3Cscript%3Ealert/xss/%3C/script%3E 管理员或版主前台登录,但未登录后台时触发...

Code injection

Static code injection vulnerability in admincp.php in DeluxeBB 1.2 and earlier allows remote authenticated administrators to inject arbitrary PHP code into logs/cp.php via the URI...

CVE-2008-2195

Static code injection vulnerability in admincp.php in DeluxeBB 1.2 and earlier allows remote authenticated administrators to inject arbitrary PHP code into logs/cp.php via the URI...

CVE-2008-2195: Improper Control of Generation of Code

Static code injection vulnerability in admincp.php in DeluxeBB 1.2 and earlier allows remote authenticated administrators to inject arbitrary PHP code into logs/cp.php via the URI...

the pw of a back door way-vulnerability warning-the black bar safety net

data\bbscache\adminrecord. php is recording the background to the landing and operation,we see how the operation of this file: admin\admincp.php: $bbsrecordfile=DP."data/bbscache/adminrecord.php"; if! fileexists$bbsrecordfile writeover$bbsrecordfile,"? php die;?& gt;\n"; //这个 if 只是 说 如果 不 存在...

CVE-2006-5561

SQL injection vulnerability in admincp.php in Discuz! GBK 5.0.0 allows remote attackers to execute arbitrary SQL commands via the cdbauth cookie...

CVE-2006-5561

SQL injection vulnerability in admincp.php in Discuz! GBK 5.0.0 allows remote attackers to execute arbitrary SQL commands via the cdbauth cookie...

CVE-2006-5561: Undefined Security Weakness

SQL injection vulnerability in admincp.php in Discuz! GBK 5.0.0 allows remote attackers to execute arbitrary SQL commands via the cdbauth cookie...