6590 matches found
Bedder CMS blind defect and repair-vulnerability warning-the black bar safety net
Publishing author: Xecuti0n3r Vulnerability type: SQL injection Vulnerability description: Vulnerability test: Injection: +True : http://www.myhack58.com/teams.php?id=1 and 1=1-- +False: http://www.myhack58.com/teams.php?id=1 and 1=2-- +eViL : http://www.myhack58.com/teams.php?id=SQLi Injection...
Fire article back office management system V2. 1 cookie injection-vulnerability warning-the black bar safety net
Publishing author: dark-on formula Vulnerability type: cookie injection Vulnerability Description: The fire article back office management system V2. 1 program using a common anti-injection procedures, only the post get to filter lead to a cookie injection vulnerability. Vulnerability analysis:...
ZabetAgahi SQL injection vulnerability-vulnerability warning-the black bar safety net
From abroad website. Can understand place generally sent to everyone The security problem in the file "ZabetAgahiCategory.php" has been created. Appear security file in"ZabetAgahiCategory.php" Injected statement: http://localhost.com/ZabetAgahiCategory.php?cid=SQL -44 UNION SELECT...
simple-log v1. 3. 1 injection vulnerability-vulnerability warning-the black bar safety net
Simple-Log is based on the PHP+MySQL open source free blog system, The system is lightweight and runs fast and has good scalability. Program download ---------------------------------------------- Just buy a vps, looking to install a blog system, see simple-log relatively simple, it under the...
Good subtle Bo then burst IIS parsing upload vulnerability and fix-vulnerability warning-the black bar safety net
By: the joken's, wdlei Recently, webmasters Download Station on a good subtle Bo program and update. Update Time 2 0 1 0 year 7 month 1 3 day, update the skin and modify the upload vulnerabilities, but still exist vulnerability issues. Vulnerability file: UpFileForm. asp Code: html head meta...
media In Spot CMS local file inclusion flaw and fix-vulnerability warning-the black bar safety net
Name : Media In Spot LFI Vulnerability Date : May,1 6 2 0 1 1 Vendor Url :http:http://www.mediainspot.com/ Dork:" "Powred By Media In Spot"A" Author : wlhaan haker iitathotmail. com Trojan: http://server/path/index.php?page=../../../../../../../../../../../../../../../../../../../../etc/passwd Fi...
Scarecrow enterprise Station management system wide byte injection exploit-vulnerability warning-the black bar safety net
Scarecrow enterprise Station based on php+sqlite and php+mysql two versions, php+sqlite features and asp+access almost,the advantage is in favor of the backup, now mostly web space to support php+sqlite. php+mysql features is conducive to processing large amounts of data, but backup and restore i...
ECshop payment methods 0day manual injection EXP-vulnerability warning-the black bar safety net
ECshop payment methods 0day manual injection of the study The original EXP: respond. php? code=tenpay&attach=voucher&spbillno=1 andselect 1 fromselect count,concatselect select SELECT concat0x7e,0x27,count,0x27,0x7e FROM ecs. ecsadminuser from the informationschema. tables limit 0,1,floorrand02x...
WordPress plugins EditorMonkey upload vulnerability-vulnerability warning-the black bar safety net
WordPress plugins EditorMonkey there upload vulnerability. With WINDOWS2003 System please note Oh. This vulnerability is fckeditor the uploaded hole. No need in speaking, Everyone in the familiar. Still comes with the editor security. Vulnerability testing are as follows:...
Q8portals SQL injection vulnerability-vulnerability warning-the black bar safety net
Vulnerability description: Q8portals is a foreign of asp content management system, due to design flaws, leading tosql injectionvulnerability Vulnerability type: sql injection, ascript injection, blind injection, injection vulnerabilities Google keywords: intext:Powered by: q8portals.com...
BeeSns Twitter V0. 2 0day-vulnerability warning-the black bar safety net
Affected versions: BeeSns V0. 2 Official address: http://www.beesns.com/ Vulnerability type: elevation of Privilege Vulnerability analysis: IP filtering is not strict,causing the user can submit malicious parameters to enhance their own privileges. This microblogging system style nice, personally...
we7cmd background upload get webshell and repair programme-vulnerability warning-the black bar safety net
Publishing author: passerby Vulnerability type: file upload leads to arbitrary code execution Vulnerability Description: The background filter is not strict, direct upload webshell Filter is a filter that is allowed to upload the type of 具体 见...
CVE-2011-1728
Stack-based buffer overflow in OmniInet.exe in the Backup Client Service in HP OpenView Storage Data Protector 6.00, 6.10, and 6.11 allows remote attackers to execute arbitrary code via a malformed EXECBAR message...
dhtml-menu-builder universal password and XSS cross-site vulnerabilities-vulnerability warning-the black bar safety net
Vulnerability Description: from abroad dhtml-menu-builder Auth bypass and Persistent xss; official website http://dhtml-menu-builder. com/; the system there is a serious background administrator authentication bypass vulnerability, as well asXSScross-site vulnerabilities. Publisher/date:...
MyBlog presence of the arbitrary file upload vulnerability-vulnerability warning-the black bar safety net
MyBlog presence of the arbitrary file upload vulnerability 2011.4.30 Publishing author: BNE MyBlog is a J2ee open source self-built blog system, an attacker by some of his Assembly question, you can upload any file. Due to the use of an earlier version of the fckeditor the. Lead by the file name...
PT-2011-2949 · Data Dynamics +1 · Data Dynamics Activebar +1
Name of the Vulnerable Software and Affected Versions: Data Dynamics ActiveBar ActiveX controls version 1.0.6.5 IBM Rational System Architect versions 11.4.0.2, 11.4.0.1, and earlier Description: The issue is related to the ActiveBar1 ActiveX control, which does not properly restrict the...
Classmates XSS cross-site vulnerabilities-vulnerability warning-the black bar safety net
Vulnerability description: Classmates 1.1.1 design flaws, leading toXSScross-site vulnerability; user can be in a vulnerable application to execute arbitrary JavaScript code. Since the vulnerability exists in“/themes/default/header.inc.php“script is not properly sanitized of user-supplied input t...
Industry management system SQL blind injection vulnerability-vulnerability warning-the black bar safety net
Industry management system SQL blind injection vulnerability. The problem of the file index. asp Type: sql blind injection,injection. Test: http://www.tmdsb.com/index.asp?CID=27+and+1=1– http://www.tmdsb.com/index.asp?CID=27+and+1=2– http://www.tmdsb.com/index.asp?CID=SQLI Google keywords:...
