191 matches found
Bo-Blog 2.1.0 remote code execution exploit
No description provided by source...
Thousand Bo cms map leads to the background and editor storm drain-vulnerability warning-the black bar safety net
Brief description: Three Ming network Technology Co., Ltd. do full is thousands of Bo CMS open source, AdminSiteMap. asp files are not filtered background address and lead to vulnerabilities Detailed description: The site is thousands of Bo CMS open source, because there is no set AdminSiteMap. a...
Bo-Blog v1.4 单用户版分类列表文件读取漏洞
Bo-Blog 是一款基於PHP的、以MySQL為資料庫支持的免費blog程式 在文件“blog.php”中，功能“分类列表”。 参数“cat=”没有经过任何处理，直接使用“$allfiles=@file"$dirblog/$cat.php";”读文件。 导致如果提交文件名，那么就会直接读取该文件处理输出。 if $job=="showcat" //列出某个分类下所有entries if !fileexists"$dirblog/$cat.php" wronginfo"没有找到这个分类。"; unset $allfiles;...
Thousand Bo enterprise website management system(NWEB System)background holding shell-vulnerability warning-the black bar safety net
Management log in:/system/adminlogin. asp 'Management account: admin 'Key code: admin888 ' 'Site data:/Database/NwebCnSite. mdb conventional content database '/Database/BakNwebCnSite. mdb backup the content database '/Database/NwebCnStat. mdb conventional flow database '/Database/BakNwebCnStat. m...
Qi Bo CMS whole Station system V7. 0 0day latest vulnerability-vulnerability warning-the black bar safety net
The first environment is IIS6. 0. Vulnerability test: http://www.xxx.com/ewebeditor/ckfinder/ckfinder.html?Type=Images&CKEditor=content1&CKEditorFuncNum=1&langCode=zh-cn Registered user, to the Management Center, published articles, CKFINDER upload your know how! After uploading the path is:...
Bo-Blog v2.1.1 COOKIE欺骗漏洞
No description provided by source...
Bo-blog v2.1.1 注入漏洞
inc/modmain.php //漏洞文件： case 'category': if !$job $job='default'; else $job=basename$job; $ifannouncement="none"; acceptrequest'mode'; if $mode==1 || $mode==2 //.......................... elseif !empty$mode && !isnumeric$mode || $mode2 getHttp404$lnc313; //...................... if isnumeric$item...
CVE-2011-1064
SQL injection vulnerability in member/list.php in qibosoft Qi Bo CMS 7 allows remote attackers to execute arbitrary SQL commands via the aidDB parameter...
Sql injection
SQL injection vulnerability in member/list.php in qibosoft Qi Bo CMS 7 allows remote attackers to execute arbitrary SQL commands via the aidDB parameter...
CVE-2011-1064
SQL injection vulnerability in member/list.php in qibosoft Qi Bo CMS 7 allows remote attackers to execute arbitrary SQL commands via the aidDB parameter...
CVE-2011-1064
CVE-2011-1064 involves a SQL injection in the Qi Bo CMS 7, specifically in member/list.php. The vulnerability is triggered via the aidDB[] parameter, allowing remote attackers to execute arbitrary SQL commands. This is a root-cause-driven issue in the application’s handling of user-supplied input...
bo-blog upload vulnerability-vulnerability warning-the black bar safety net
| Attention to the following recent of several large cattle site was hacked the message, The know with bo-blog, just under the sleeve 2. 1. 1 See, found a point problem. This program and F2blog the presence of the same upload bug, just use the hard point, to a certain permissions. But the...
Hui-Bo Shopping Mall system V6. 0 injection vulnerability analysis-vulnerability warning-the black bar safety net
Published:2010-09-23 Affected version:Hui-Bo Shopping Mall system V6. 0 Vulnerability description: injection vulnerability Publishing author: m4r10 reproduced please indicate the copyright Vulnerability analysis:productinc. asp, checkSQL. asp productinc. asp: Id = TrimRequest. QueryString"id" If...
Security Wei Bo imitation Taobao multi-user Mall program v7. 2 vulnerability-vulnerability warning-the black bar safety net
==Estimation of many a fancy to Taobao guest number of procedures. A relatively simple system. Program all types of variables are character type, use the Password = replacerequest. form"password","'","" a similar such statement to filter single quotes, and don't know which bit of large cattle hav...
Bo-Blog 2.0.3 mod_tag.php SQL注入漏洞
No description provided by source...
Bo-Blog 2.0.3 whizzylink.php 文件信息泄露漏洞
No description provided by source...
Bo-Blog 2.1.0 realplay.php 跨站脚本攻击漏洞
No description provided by source...
Bo-Blog 2.1.1 Command Execution
Securitylab.ir Application Info: Name: bo-blog Version: 2.1.1 Download: http://www.bo-blog.com/download/release/Bo-blogV2.1.1.tar.gz Discoverd By: Securitylab.ir Website: http://securitylab.ir Contacts: adminatsecuritylab.ir & info@securitylabdotir Vulnerability Info: Type: Remote Command Executi...
Bo-Blog 2.0.3 background plug horse execute arbitrary commands vulnerability-vulnerability warning-the black bar safety net
| Article source: &&www.slenk.net Article author: lone water around the city Today analyzed under the Bo-Blog 2.0.3 of the code, The event is by this version of the Flyh4t big cow release of a known injection vulnerability. Into the backend crunching for half a day, and looked under the code,...