EUVD-2018-2201

Malware in sbrugna...

QingDao Nature Easy Soft Chanzhi Enterprise Portal System Arbitrary File Read Vulnerability

QingDao Nature Easy Soft Chanzhi Enterprise Portal System a.k.a. chanzhieps is an enterprise portal system for corporate marketing use. The system has built-in features such as articles, products, forums, comments and members. A security vulnerability exists in QingDao Nature Easy Soft Chanzhi...

CVE-2018-10122

QingDao Nature Easy Soft Chanzhi Enterprise Portal System aka chanzhieps pro1.6 allows remote attackers to read arbitrary files via directory traversal sequences in the pathname parameter to www/file.php...

CVE-2018-10122

QingDao Nature Easy Soft Chanzhi Enterprise Portal System aka chanzhieps pro1.6 allows remote attackers to read arbitrary files via directory traversal sequences in the pathname parameter to www/file.php...

Directory traversal

QingDao Nature Easy Soft Chanzhi Enterprise Portal System aka chanzhieps pro1.6 allows remote attackers to read arbitrary files via directory traversal sequences in the pathname parameter to www/file.php...

CVE-2018-10122

The CVE-2018-10122 entry concerns QingDao Nature Easy Soft Chanzhi Enterprise Portal System (pro1.6). Affected component is the file.php pathname handling, where directory traversal sequences allow remote attackers to read arbitrary files. This is a remote file disclosure vulnerability with CVSS ...

CVE-2018-10122

QingDao Nature Easy Soft Chanzhi Enterprise Portal System aka chanzhieps pro1.6 allows remote attackers to read arbitrary files via directory traversal sequences in the pathname parameter to www/file.php...

chanzhi v2.5 /system/module/file/control.php 文件上传漏洞

No description provided by source...

代码审计系列8: 蝉知企业门户2.4正式版 猥琐获取管理员账户密码

简要描述： 青岛息壤网络信息有限公司成立于2013年，由禅道软件公司青岛易软天创全资投资创办，位于美丽的青岛开发区，团队成员拥有丰富的网站设计、系统研发、服务器维护和SEO经验。我们正在打造一款开源免费的企业门户系统，以帮助企业建立品牌网站，进行宣传推广、市场营销、产品销售和客户跟踪。息壤，为天下企业提供专业的营销工具！ 详细说明： 蝉知企业门户系统在安装完成后会在 \system\tmp\log\ 下生成类似 的两个文件. 我们打开 sql.20140701.log 内容如下： 20140701 13:28:01: /install.php 20140701 13:28:04:...