257 matches found
Qi Bo cms website system is improperly configured to cause the arbitrary user login vulnerability-vulnerability warning-the black bar safety net
Vulnerability type: unauthorized access/permissions bypass Brief description: Qi Bo cms whole Station system of the original PHP168 configured improperly cause any user login, such as the cms administrator. Detailed description: Or due to UCCENTER the problem, before it is too UCKEY variable is...
Will Bo CMS(JumboTCMS)_V6 code audit summary-vulnerability warning-the black bar safety net
Author: Seay Blog: http://seay.sinaapp.com/ I learn software testing Professional, the most recent school to prepare for this aspect of the course, so want to find a set ASP. NET open source CMS play, Baidu the next, saw the Bo CMS, popularity is also quite high, went to the official website to...
US-based website covering China's Bo Xilai scandal hacked
US-based website covering China's Bo Xilai scandal hacked A US-based website that has reported extensively on the Bo Xilai scandal in Chongqing says it has been crippled by a concerted hacker attack. The site was rendered inaccessible for much of Thursday, depriving readers of coverage of the...
Will Bo CMS Powered by JumbotCms vulnerability-vulnerability warning-the black bar safety net
Due to the working relationship between the detection of a station when found his URL more special with a cmsfile directory; swept under the directory find a fck because the version is relatively low, you can traverse the directory Baidu it is not human hair, it made it relatively lower...
Bo-Blog 2.1.0 go.php 文件包含漏洞
No description provided by source...
An anti-injection of a noob error-thousand Bo enterprise program-vulnerability warning-the black bar safety net
Thousand Bo enterprise Station program, anti-injected into the statement where there is a little error! Detail: If EnableStopInjection = True Then If Request. QueryString "" Then Call StopInjectionRequest. QueryString If Request. Cookies "" Then Call StopInjectionRequest. Cookies If Request...
Bo-Blog 2.1.0 remote code execution exploit
No description provided by source...
Thousand Bo cms map leads to the background and editor storm drain-vulnerability warning-the black bar safety net
Brief description: Three Ming network Technology Co., Ltd. do full is thousands of Bo CMS open source, AdminSiteMap. asp files are not filtered background address and lead to vulnerabilities Detailed description: The site is thousands of Bo CMS open source, because there is no set AdminSiteMap. a...
Bo-Blog v1.4 单用户版分类列表文件读取漏洞
Bo-Blog 是一款基於PHP的、以MySQL為資料庫支持的免費blog程式 在文件“blog.php”中，功能“分类列表”。 参数“cat=”没有经过任何处理，直接使用“$allfiles=@file"$dirblog/$cat.php";”读文件。 导致如果提交文件名，那么就会直接读取该文件处理输出。 if $job=="showcat" //列出某个分类下所有entries if !fileexists"$dirblog/$cat.php" wronginfo"没有找到这个分类。"; unset $allfiles;...
Thousand Bo enterprise website management system(NWEB System)background holding shell-vulnerability warning-the black bar safety net
Management log in:/system/adminlogin. asp 'Management account: admin 'Key code: admin888 ' 'Site data:/Database/NwebCnSite. mdb conventional content database '/Database/BakNwebCnSite. mdb backup the content database '/Database/NwebCnStat. mdb conventional flow database '/Database/BakNwebCnStat. m...
Qi Bo CMS whole Station system V7. 0 0day latest vulnerability-vulnerability warning-the black bar safety net
The first environment is IIS6. 0. Vulnerability test: http://www.xxx.com/ewebeditor/ckfinder/ckfinder.html?Type=Images&CKEditor=content1&CKEditorFuncNum=1&langCode=zh-cn Registered user, to the Management Center, published articles, CKFINDER upload your know how! After uploading the path is:...
Bo-blog v2.1.1 注入漏洞
inc/modmain.php //漏洞文件： case 'category': if !$job $job='default'; else $job=basename$job; $ifannouncement="none"; acceptrequest'mode'; if $mode==1 || $mode==2 //.......................... elseif !empty$mode && !isnumeric$mode || $mode2 getHttp404$lnc313; //...................... if isnumeric$item...
Bo-Blog v2.1.1 COOKIE欺骗漏洞
No description provided by source...
CVE-2011-1064
SQL injection vulnerability in member/list.php in qibosoft Qi Bo CMS 7 allows remote attackers to execute arbitrary SQL commands via the aidDB parameter...
Sql injection
SQL injection vulnerability in member/list.php in qibosoft Qi Bo CMS 7 allows remote attackers to execute arbitrary SQL commands via the aidDB parameter...
CVE-2011-1064
CVE-2011-1064 involves a SQL injection in the Qi Bo CMS 7, specifically in member/list.php. The vulnerability is triggered via the aidDB[] parameter, allowing remote attackers to execute arbitrary SQL commands. This is a root-cause-driven issue in the application’s handling of user-supplied input...
CVE-2011-1064
SQL injection vulnerability in member/list.php in qibosoft Qi Bo CMS 7 allows remote attackers to execute arbitrary SQL commands via the aidDB parameter...
bo-blog upload vulnerability-vulnerability warning-the black bar safety net
| Attention to the following recent of several large cattle site was hacked the message, The know with bo-blog, just under the sleeve 2. 1. 1 See, found a point problem. This program and F2blog the presence of the same upload bug, just use the hard point, to a certain permissions. But the...
Hui-Bo Shopping Mall system V6. 0 injection vulnerability analysis-vulnerability warning-the black bar safety net
Published:2010-09-23 Affected version:Hui-Bo Shopping Mall system V6. 0 Vulnerability description: injection vulnerability Publishing author: m4r10 reproduced please indicate the copyright Vulnerability analysis:productinc. asp, checkSQL. asp productinc. asp: Id = TrimRequest. QueryString"id" If...
Security Wei Bo imitation Taobao multi-user Mall program v7. 2 vulnerability-vulnerability warning-the black bar safety net
==Estimation of many a fancy to Taobao guest number of procedures. A relatively simple system. Program all types of variables are character type, use the Password = replacerequest. form"password","'","" a similar such statement to filter single quotes, and don't know which bit of large cattle hav...