257 matches found
Cockpit CMS 0.4.4 0.5.5 - Server-Side Request Forgery
Cockpit CMS 0.4.4 0.5.5 - Server-Side Request Forgery SSRF（Server Side Request Forgery） in Cockpit 0.4.4-0.5.5 CVE-2018-9302 Cockpit CMS repairs CVE-2017-14611, but it can be bypassed, SSRF still exist, affecting the Cockpit CMS 0.4.4-0.5.5 versions.I've been tested success of "Cockpit CMS" laste...
Cockpit CMS 0.13.0 Server Side Request Forgery Vulnerability
Cockpit CMS version 0.13.0 suffers from a server-side request forgery vulnerability. SSRFPS"Server Side Request ForgeryPSc in Cockpit CMS 0.13.0 CVE-2017-14611 The Cockpit CMS is awesome if you need a flexible content structure but don't want to be limited in how to use the content. Product...
Onethink CMS Server Side Request Forgery
SSRFPS"Server Side Request ForgeryPSc in Onethink All version CVE-2017-14323 The Onethink is an open source CMSContent Management System.This system is based on the Thinkphp3.2 development framework. Product Download: http://www.onethink.cn Vulnerability TypePSoSSRFPS"Server Side Request ForgeryP...
bo-vs.ch XSS vulnerability
Open Bug Bounty ID: OBB-524259 Description| Value ---|--- Affected Website:| bo-vs.ch Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
Skip-Bo™ Free - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities
HackApp vulnerability scanner discovered that application Skip-Bo™ Free published at the 'play' market has multiple vulnerabilities...
Bo-Blog 2.1.1 usergroup参数 跨站脚本攻击漏洞
No description provided by source...
Bo-blog 2.1.1 xmlrpc.php 上传漏洞
No description provided by source...
Qi Bo CMS variable overwrite vulnerability exp-vulnerability warning-the black bar safety net
Vulnerability of specific analysis in the http://security.alibaba.com/blog/blog.htm?spm=0.0.0.0.AooULy&id=1 3, The following published what I wrote of the exploits and exp. Use the following steps: （1）The first visit/member below the“comment management”function, the capture （2）in the http request...
Qi Bo cms all products are proof there is a back door, please the majority of users attention-vulnerability warning-the black bar safety net
According to the white hats in a vulnerability on the platform submitted to the loopholes of the display, the well-known open-source program qibocms all products have been added to the back door. ! /Article/UploadPic/2015-3/2 0 1 5 3 2 5 1 1 4 1 3 1 8 6 0. png According to the features prior to...
某图书管理系统存在通用型SQL注入漏洞
简要描述： ... 详细说明： 系统名称：博云非书资料管理系统 厂商信息：杭州麦达电子有限公司版权所有 该系统有个特别 高大上 的功能：“云中心查找”功能 恰好这个查找的链接的参数存在sql注入漏洞，且该功能无需登录。 百度搜索：inurl:poweb 非书资料管理系统 罗嗦到这里，看证明吧 -------------------------------- 下面的漏洞证明，直接给出“云中心查找”功能得出链接（只要是该系统，都存在查找的功能，且无需登陆到系统中），链接类似于...
Dennis Fisher and Mike Mimoso Discuss the Target Data Breach and More
Dennis Fisher and Mike Mimoso discuss the news of the weird in the security industry since the holidays, including the latest revelations about the Target data breach and the decision by some speakers to boycott the RSA Conference because of the NSA revelations. Target image via imprint777‘s Flic...
Qi Bo cms latest background getshell-a vulnerability warning-the black bar safety net
NIMA, originally setxss, but submitted to the dark clouds directly to me not through directly on the figure. forget it. ! 1 ! 2 ! 3...
Bo-Blog 2.1.1 - Cross-Site Scripting SQL Injection
Bo-Blog 2.1.1 - Cross-Site Scripting SQL Injection source: https://www.securityfocus.com/bid/61880/info Bo-Blog is prone to a cross-site scripting vulnerability and an SQL-injection vulnerability because it fails to properly sanitize user-supplied input. Attackers can exploit these issues to...
Bo-Blog 2.1.1 Cross Site Scripting / SQL Injection
Exploit Title : Bo-Blog 2.1.1 Multiple Vulnerabilites Exploit Author : Ashiyane Digital Security Team Official site : http://www.bo-blog.com/ Tested on: Windows,Linux /////////////////////////////////////////////// Google Dork : intext:"Powered by Bo-Blog 2.1.1"...
Bo-Blog 2.1.1 - Cross-Site Scripting / SQL Injection
source: https://www.securityfocus.com/bid/61880/info Bo-Blog is prone to a cross-site scripting vulnerability and an SQL-injection vulnerability because it fails to properly sanitize user-supplied input. Attackers can exploit these issues to execute arbitrary code in the context of the browser,...
Qi Bo cms back-end database tool at the filter is not strictly the actuator can be written in a word-vulnerability and early warning-the black bar safety net
If your account password is leaked then you're in danger. in the background can directly get a webshell The background for the convenience of webmasters to have a database tool where the implementation Select '%execute request"value"%' into outfile 'F:/wwwroot/shiyanshi/cache/1.asp'; Just write t...
Qi Bo CMS background get shell-vulnerability warning-the black bar safety net
Brief description: Background get the shell Detailed description: ! ! ! ! Vulnerability to prove: ! Repair solutions: You know...
Qi Bo CMS know that the system injection vulnerability-vulnerability warning-the black bar safety net
php168 know the system injection vulnerability Ps:inadvertently come I'm finishing up the three keywords inurl:zhidao Powered by qibosoft inurl:w8 Powered by qibosoft inurl:ask Powered by qibosoft...
bo-blog xss vulnerability-vulnerability warning-the black bar safety net
Bo-Blog is an domestic excellent open source blogging, wordpress and other blog Bo-Blog the advantage of easy to use, convenient, efficiency is high. If wordpress is the professional blogging program so Bo-blog is a civilian blog. Bo-blog The advantages and disadvantages are obvious, the...