2088 matches found
php后台验证码绕过暴力破解
简要描述： php后台验证码绕过暴力破解 详细说明： 最新版 登陆请求为: username=admin&password=admin88&authcode=adaa&loginsub=&pytoken=e474ef35609b 验证码使用一次没有销毁，可以一直使用导致后台暴力破解。 漏洞证明：...
phpwind可绕过验证码继续暴力破解用户（demo演示）
简要描述： 帮过我的人，从不敢忘。打击我的人，感谢你们！ 详细说明： 首先来到phpwind的官网看看，发现phpwind已经更新到9.0了，官网也是用的最新的程序 然后来到登陆的地方可以看到，网站有验证码限制（心凉了半截） 然后随便选个账号登陆看看，输入错误以后会发现有登陆次数的限制（彻底感觉无望了。。） 这里我以为他是封IP的，对IP做了限制的，但是我不死心啊，换了一个账号随便登陆一下发现原来是对账号做限制而不是ip（心热了半截） 既然登陆限制解决了，那就好办多了，对验证码的绕过我还是比较有信心的，先抓个包看看吧，发现用户名和密码全部明文传输，而且验证码的包是可以抓到的...
phpwind登录处可撞库可锁定他人帐号
简要描述： Phpwind在登录处可以撞库官网演示 以及锁定他人帐号，可持续批量锁定是不是很爽，未测试。。。。。 开启验证码也可绕过。 详细说明： 黑盒测试的直接说怎么用吧。 1. 我们先把所有帐号的用户提取出来。 代码如下 def getuid: con=urllib2.urlopen"http://www.phpwind.net/index.php?m=space&uid="+struid.read r=re.compile'\S+的个人空间' return r.findallcon 2. 再来做个社工库的接口，根据用户名提取密码。 def getpassname:...
ecshop后台暴力破解验证码绕过
简要描述： ecshop后台暴力破解 详细说明： 登陆请求为 username=admin&password=admin888&captcha=1111&act=signin 请求的时候去掉cookie中的ECSCPID=参数 服务端就会不验证验证码直接验证账号的密码是否正确。 使用burp进行暴力破解测试。 漏洞证明：...
Discuz 的UCenter创始人密码可被爆破（有案例）
简要描述： 没看源码，直接黑盒测试的。非验证码识别。 so 附上利用代码+几个成功案例。 详细说明： http://192.168.1.105/discuz/ucserver/admin.php 含有一个验证码 验证码的地址为 http://localhost/discuz/ucserver/admin.php?m=seccode&seccodeauth=250dIGq%2FYDhocuXf3IrsBkvB2k23JXlXAbuWr3X1liUcX94&7500 但是 经过测试发现 登录ucserver的时候 如果ip第一次出现那么 seccode的默认值为cccc 而 ip地址...
CVE-2014-6288
The powermail extension 2.x before 2.0.11 for TYPO3 allows remote attackers to bypass the CAPTCHA protection mechanism via unspecified vectors...
Design/Logic Flaw
The powermail extension 2.x before 2.0.11 for TYPO3 allows remote attackers to bypass the CAPTCHA protection mechanism via unspecified vectors...
CVE-2014-6288
The TYPO3 powermail extension (component: powermail, TYPO3 ecosystem) is affected in versions 2.0.0 through 2.0.10. The root cause is a CAPTCHA bypass vulnerability that allows remote attackers to bypass CAPTCHA protection via unspecified vectors, enabling form submissions without proper captcha ...
CVE-2014-6288
The powermail extension 2.x before 2.0.11 for TYPO3 allows remote attackers to bypass the CAPTCHA protection mechanism via unspecified vectors...
Drupal Mollom Module Cross-Site Scripting Patch
Drupal today released an update that patches a cross-site scripting vulnerability in a popular spam and content moderation module used by websites built on the open source CMS. The vulnerability was in a feature of the Mollom module that is installed on at least 60,000 sites, said Drupal security...
XSScrapy - Fast, thorough XSS vulnerability spider
Fast, thorough, XSS spider. Give it a URL and it'll test every link it finds for cross-site scripting vulnerabilities. XSS attack vectors xsscrapy will test Referer header way more common than I thought it would be! User-Agent header Cookie header added 8/24/14 Forms, both hidden and explicit URL...
ESPCMS 全版验证码破解验证码等于虚设（可导致爆破等附解密exp）
简要描述： ESPCMS 全版！验证码破解！验证码等于虚设（可导致爆破等） 详细说明： 先看验证码生成的方法！只是生成了一个6位随机数 然后加密保存到cookie中！关键点在于加密函数eccode 竟然采用的是默认的key $fun = new functioninc; $seccode = rand100000, 999999; $secode = $fun-accept'secode', 'R'; if $secode == 'ecispseccode' $secodename = 'ecispseccode'; else $secodename =...
Discuz! 多数版本可被暴力破解，包括UCenter
简要描述： Discuz! 多数版本均可被暴力破解，包括UCcenter，我只测试了几个例子，有些深入的工作没有做。若是要写个全自动化的工具，还得多花点心思。 : 详细说明： 很简单的问题，Discuz取不到用户的真实IP，可以被X-Forwarded-For头和Client-IP头绕过，伪造欺骗源IP。导致攻击者可以无限次数发起登录请求。 以锤子手机的论坛为例： Discuz! X3。 找到ID为1的管理员用户是webmaster： http://bbs.smartisan.cn/home.php?mod=space&uid=1 锤子论坛没有验证码，胡乱输入错误5次，提示错误次数过多：...
WordPress SI CAPTCHA Anti-Spam Plugin Cross Site Scripting Vulnerability
WordPress SI CAPTCHA Anti-Spam Plugin is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE...
CVE-2014-5190
Cross-site scripting XSS vulnerability in captcha-secureimage/test/index.php in the SI CAPTCHA Anti-Spam plugin 2.7.4 for WordPress allows remote attackers to inject arbitrary web script or HTML via the PATHINFO...
Cross site scripting
Cross-site scripting XSS vulnerability in captcha-secureimage/test/index.php in the SI CAPTCHA Anti-Spam plugin 2.7.4 for WordPress allows remote attackers to inject arbitrary web script or HTML via the PATHINFO...
CVE-2014-5190
The CVE-2014-5190 entry concerns the WordPress plugin SI CAPTCHA Anti-Spam (v2.7.4). The connected documents confirm a Cross-Site Scripting (XSS) vulnerability in captcha-secureimage/test/index.php that allows remote attackers to inject arbitrary web script or HTML via PATH_INFO. The practical im...
CVE-2014-5190
Cross-site scripting XSS vulnerability in captcha-secureimage/test/index.php in the SI CAPTCHA Anti-Spam plugin 2.7.4 for WordPress allows remote attackers to inject arbitrary web script or HTML via the PATHINFO...
WordPress SI CAPTCHA Plugin <= 2.7.4 - XSS
Because of this vulnerability in captcha-secureimage/test/index.php, the attackers can inject arbitrary web script or HTML via the PATHINFO. Solution Update the plugin...
WordPress SI CAPTCHA Cross Site Scripting
|||||||||||||||||||||||||||||||||||||||||||||||||| |-------------------------------------------------------------------------| | Exploit Title: Wordpress SI CAPTCHA Anti-Spam Plugin Cross site scripting | | Exploit Author: Ashiyane Digital Security Team | | Date : Date: 2014-08-02 | | Vendor...