ECSHOP website program can bypass the permission to upload the word Trojan horse-vulnerability warning-the black bar safety net

Brief description: You can bypass the permissions to upload the word Trojan Detailed description: ! The front Desk left a note, content is our word on Trojans:? php eval$POSTcmd;?& gt; ! Then in the background the system==Database Management== Data Backup==select custom backup, selecting...

KesionCMS V9. 0 3 Final SQL injection vulnerability attached to the use of the method-vulnerability warning-the black bar safety net

The vulnerability exists in the User/ChinaBankAutoReceive. asp % ' 'Software name:Kesion CMS 9.0 'Email: [email protected] . QQ:111394,9537636 The ' Web: http://www.kesion.com http://www.kesion.cn 'Copyright C Kesion Network All Rights Reserved. ' Response. Buffer = true Response. Expires = 1...

Mozilla Firefox <= 11 Multiple Vulnerabilities

Binary data 801359.prm...

SeaMonkey 2.x < 2.9.0 Multiple Vulnerabilities

Binary data 6791.prm...

Mozilla Thunderbird < 12.0 Multiple Vulnerabilities

Binary data 6792.prm...

Mozilla SeaMonkey 2.x < 2.9.0 Multiple Vulnerabilities

Binary data 801320.prm...

A section of the asp of the cms application injection vulnerabilities-vulnerability warning-the black bar safety net

Brief description: Google Baidu search keyword inurl:HomeMarket. asp in the domain name behind add the following code to blast out the management account password/NewsType. asp? SmallClass='%20union%20select%2 0 0,username%2BCHR1 2 4%2Bpassword,2,3,4,5,6,7,8,9%20from%20admin%20union%20select%2...

KingCMS 1.0 SQL Injection vulnerability-vulnerability warning-the black bar safety net

Official website: EXP http://127.0.0.1/kingcmsphp1.0/index.php/list-13 and 1=1-1.html !...

Yahoo! Browser for Android 地址栏伪造漏洞(CVE-2013-2307)

Bugtraq ID:59525 CVE ID:CVE-2013-2307 Yahoo! Browser for Android是一款安卓平台下的浏览器 Yahoo! Browser for Android 1.4.3之前版本打开新窗口时存在一个安全漏洞，允许远程攻击者利用漏洞伪造地址栏，可进行网络钓鱼等攻击 0 Yahoo! Browser v1.4.2 厂商解决方案 用户可联系厂商获得相应的升级程序或补丁： https://play.google.com/store/apps/details?id=jp.co.yahoo.android.ybrowser&hl=en...

CVE-2013-2306

The jigbrowser+ application before 1.6.4 for Android does not properly open windows, which allows remote attackers to spoof the address bar via a crafted web site...

CVE-2013-2307

The Yahoo! Browser application before 1.4.3 for Android allows remote attackers to spoof the address bar via a crafted web site...

Code injection

The Yahoo! Browser application before 1.4.3 for Android allows remote attackers to spoof the address bar via a crafted web site...

Open redirect

The jigbrowser+ application before 1.6.4 for Android does not properly open windows, which allows remote attackers to spoof the address bar via a crafted web site...

CVE-2013-2306

The CVE-2013-2306 vulnerability affects jigbrowser+ for Android prior to version 1.6.4. The issue arises when opening a new window, which allows remote attackers to spoof the address bar via a crafted web site, enabling phishing-like deception by forging the displayed URL. Public references consi...

CVE-2013-2307

CVE-2013-2307 affects the Yahoo! Browser for Android (versions before 1.4.3). The vulnerability allows remote attackers to spoof the address bar via a crafted web site, enabling phishing-like spoofing. The provided documents state the affected range (pre-1.4.3) and describe the impact, but do not...

CVE-2013-2307

The Yahoo! Browser application before 1.4.3 for Android allows remote attackers to spoof the address bar via a crafted web site...

Yahoo! Browser vulnerable to address bar spoofing

Overview Yahoo! Browser contains an issue when opening a new window, which may result in the address bar being spoofed. Keita Haga of keitahaga.com reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership. Impact This...

jigbrowser+ for Android vulnerable to address bar spoofing

Overview jigbrowser+ for Android contains an issue when opening a new window, which may result in the address bar being spoofed. Keita Haga of keitahaga.com reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership. Impact Th...

JVN#01313594: jigbrowser+ for Android vulnerable to address bar spoofing

jigbrowser+ for Android contains an issue when opening a new window, which may result in the address bar being spoofed. Impact This vulnerability could be leveraged to forge the contents of the address bar for conducting phishing attacks. Solution Update the software Update to the latest version...

JVN#55074201: Yahoo! Browser vulnerable to address bar spoofing

Yahoo! Browser contains an issue when opening a new window, which may result in the address bar being spoofed. Impact This vulnerability could be leveraged to forge the contents of the address bar for conducting phishing attacks. Solution Update the software Update to the latest version according...