4696 matches found
Web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc...
show data sources ite config exploit
==================================== show data sources ite config exploit ==================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' /' / /' 0 0 /, // ,/ / 1 1 // /' / // /' / /' 0 0 / / / / / / 1 1 / / 0 0 ////// // // // // // 1 1 /...
RaakCMS Multiple Vulnerabilities
Exploit for unknown platform in category web applications ================================ RaakCMS Multiple Vulnerabilities ================================ Application Info: Name: RaakCms Vendor: http://raakcms.com Vulnerability: ======================= Arbitrary File Upload...
Wodig4. 1. 3 Access the free version(UTF-8)upload vulnerability-vulnerability warning-the black bar safety net
1, The upload/uploadimage. asp, Mutiuploadimage. asp. From the cookie to obtain the userid and put in the session, as the path. ASP/Visual Basic code 1. loadsrc="/UploadFile/"&Request. Cookies"UserID"&"/" 'if the website is not put in with the directory, please/UploadFile before adding you to...
Shopxp v8.0 SQL Injection 0day
系统使用了早期的枫叶防注系统，只过滤了GET，并且可以绕过，这里不谈绕过的问题了，我们看到 xplistpl.asp 9-36行代码： table width="100%" border="0" cellspacing="0" cellpadding="0" tr td width="88%"TABLE cellSpacing=0 cellPadding=0 width=100% align=center border=0 TBODY TR td width="1" background="imgshopxp/xiao/bgbg.gif"/td TD class=b vAlign=top...
eWebeditor Traversal / Shell Upload / Bypass / Disclosure
Securitylab.ir Application Info: Name: eWebeditor Version: ASP Vulnerability: ======================= Arbitrary File Upload ======================= ======================= Arbitrary File Upload 2 ======================= http://site.com/admin/ewebeditor/ewebeditor.htm?id=body&style=popup...
Ajax Manset Haber Sistemi 3 Administrative Bypass
============================================================================== / \ | | | | / \ | | | | / \ | | | | / \ | || | / \ | | | | / \ | | // \ || || // \ || || ============================================================================== » Note : LionTurk.Turkblog.com Resmi Web Sitem :D...
Wodig4. 1. 3 Access the free version(UTF-8)upload vulnerability-vulnerability warning-the black bar safety net
Author: unknown 1, The upload/uploadimage. asp, Mutiuploadimage. asp. From the cookie to obtain the userid and put in the session, as the path. ASP/Visual Basic code 1. loadsrc="/UploadFile/"&Request. Cookies"UserID"&"/" 'if the website is not put in with the directory, please/UploadFile before...
ewebeditor for php&asp version of the backend skips the authentication vulnerability-vulnerability warning-the black bar safety net
Affected versions:php v3. 8,asp v2. 8 eWebEditor is a WYSIWYG online editor. As the name suggests, is on the network using the WYSIWYG edit mode for editing illustrated articles, news, discussions stickers, circulars, notes and other word processing applications. ../ewebeditor/admin/config. php...
CemaListe 2.3 Database Disclosure
============================================================================== / \ | | | | / \ | | | | / \ | | | | / \ | || | / \ | | | | / \ | | // \ || || // \ || || ============================================================================== » Note : LionTurk.Turkblog.com Resmi Web Sitem :D...
eWebeditor ASP Version - Multiple Vulnerabilities
eWebeditor ASP Version - Multiple Vulnerabilities Application Info: Name: eWebeditor Version: ASP Vulnerability: ======================= Arbitrary File Upload ======================= ======================= Arbitrary File Upload 2 =======================...
fipsForum 2.6 Database Disclosure
============================================================================== / \ / \ \ \ / / / \ / \ / /\ / /\ \ \ \ / / / /\ / /\ \ / / \ / \ \ \ / / / / \ / \ \ // \ / // \ ============================================================================== » Note : Tribute to the martyrs of...
Web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc...
LookMer Music Portal Database Disclosure
============================================================================== / \ | | | | / \ | | | | / \ | | | | / \ | || | / \ | | | | / \ | | // \ || || // \ || || ============================================================================== » Note : LionTurk.Turkblog.com Resmi Web Sitem :D...
Basmi Okul Scripti Database Disclosure / Shell Upload
============================================================================== / \ | | | | / \ | | | | / \ | | | | / \ | || | / \ | | | | / \ | | // \ || || // \ || || ============================================================================== » Note : Forever RevengeHack.Com-Ar-Ge.Org Acildi...
ewebeditor php&asp版本后台跳过认证漏洞
eWebEditor是一个所见即所得的在线编辑器。顾名思义，就是能在网络上使用所见即所得的编辑方式进行编辑图文并茂的文章、新闻、讨论贴、通告、记事等多种文字处理应用。 ../ewebeditor/admin/config.php文件 用户认证方式存在严重的安全漏洞，可以直接跳过认证获取到管理员权限。 php v3.8 asp v2.8 暂无 请参考官方补丁 首先当然要找到登陆后台,默认是../eWebEditor/admin/login.php,进入后台后随便输入一个用户和密码,当然会提示出错了. 这时候你清空浏览器的url,然后输入...
Web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc...
Web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc...
Insufficient User Input Validation in VP-ASP 6.50 Demo Code
======================================================================== = CodeScan Advisory, codescan.com [email protected] = = Insufficient User Input Validation in VP-ASP 6.50 Demo Code = = Vendor Website: = http://www.vpasp.com/ = = Affected Version: = VP-ASP Shopping Cart 6.50 Demo Cod...