phpcms2008网站管理系统ask/search_ajax.php页面存在SQL注入漏洞

phpcms是一款基于 PHP+Mysql 架构的网站内容管理系统，也是一个开源的 PHP 开发平台。Phpcms 采用模块化方式开发，功能易用便于扩展，可面向大中型站点提供重量级网站建设解决方案。3年来，凭借 Phpcms 团队长期积累的丰富的Web开发及数据库经验和勇于创新追求完美的设计理念，使得 Phpcms 得到了近10万网站的认可，并且越来越多地被应用到大中型商业网站 /ask/searchajax.php Code: if$q $where = " title LIKE '%$q%' AND status = 5";//没做过滤直接感染了$where else...

webSPELL 4.2.0e - page Blind SQL Injection

webSPELL 4.2.0e - page Blind SQL Injection !/usr/bin/perl use LWP::UserAgent; use HTTP::Cookies; use Getopt::Long; '/ -.- ------------------oOO------OOo----------------- | | | / / / / | | / / / / / / / / / / / | | // // / / / // / // / // | | ///,// /./,/, // | | Security Research Division //...

ProjectCMS 1.1b Multiple Remote Vulnerabilities

Exploit for unknown platform in category web applications =============================================== ProjectCMS 1.1b Multiple Remote Vulnerabilities =============================================== ---------------------------------------------------------------------------------------------- ...

ProjectCMS 1.1b Multiple Remote Vulnerabilities

No description provided by source. || || || -----------------------------------------\ == -- ----------- ---------------------------- ------------------/ ¡VIVA SPAIN!...¡GANAREMOS EL MUNDIAL!...o.O ¡PROUD TO BE SPANISH! ----------------------------------...

[SECURITY] Fedora 9 Update: drupal-6.11-1.fc9

Equipped with a powerful blend of features, Drupal is a Content Management System written in PHP that can support a variety of websites ranging from personal weblogs to large community-driven websites. Drupal is highly configurable, skinnable, and secure...

[SECURITY] Fedora 10 Update: drupal-6.11-1.fc10

Equipped with a powerful blend of features, Drupal is a Content Management System written in PHP that can support a variety of websites ranging from personal weblogs to large community-driven websites. Drupal is highly configurable, skinnable, and secure...

Leap CMS 0.1.4 (searchterm) Blind SQL Injection Exploit

No description provided by source. !/usr/bin/perl || || || -----------------------------------------\ == -- ----------- ---------------------------- ------------------/ ¡VIVA SPAIN!...¡GANAREMOS EL MUNDIAL!...o.O ¡PROUD TO BE SPANISH!...

Leap CMS Multiple remote vulnerabilities

The remote Leap CMS is affected to multiple remote vulnerabilities. Leap is a single file, template independent, PHP and MySQL Content Management System. OpenVAS Vulnerability Test $Id: remote-LeapCMSmulti.nasl 6520 2017-07-04 14:28:49Z cfischer $ Description: This script multiple remote...

Leap CMS service detection

The remote host is running the Leap CMS. Leap is a single file, template independent, PHP and MySQL Content Management System. OpenVAS Vulnerability Test $Id: remote-detect-LeapCMS.nasl 8022 2017-12-07 08:23:28Z teissa $ Description: This script ensure that the Leap CMS is installed and running...

Leap CMS 0.1.4 - 'searchterm' Blind SQL Injection

!/usr/bin/perl || || || -----------------------------------------\ == -- ----------- ---------------------------- ------------------/ ¡VIVA SPAIN!...¡GANAREMOS EL MUNDIAL!...o.O ¡PROUD TO BE SPANISH! ----------------------------------------------------------------------------------------------...

FOWLCMS 1.1 (AB/LFI/SU) Multiple Remote Vulnerabilities

Exploit for unknown platform in category web applications ======================================================= FOWLCMS 1.1 AB/LFI/SU Multiple Remote Vulnerabilities =======================================================...

Fowl CMS 1.1 SQL Injection / LFI / Upload

------------------------------------------------------- MULTIPLE REMOTE VULNERABILITIES--FOWLCMS 1.1-- ------------------------------------------------------- ----------------- CMS INFORMATION: ----------------- --WEB: https://sourceforge.net/projects/fowlcms/ --DOWNLOAD:...

Mandriva Linux Security Advisory : joomla (MDVSA-2008:060)

Several severe security issues were discovered in the Joomla! PHP-based content management system. These issues have been fixed in version 1.0.15 which is provided with this update. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...

Clan Tiger CMS 1.1.1 SQL Injection

----------------------------------------------------------- CLAN TIGER CMS AUTH BYPASS LOGIN FORM SQL INJECTION ----------------------------------------------------------- CMS INFORMATION: --WEB: http://www.clantiger.com --DOWNLOAD: http://www.clantiger.com/download-clan-cms --DEMO:...

ClanTiger 1.1.1 - slug Blind SQL Injection

ClanTiger 1.1.1 - slug Blind SQL Injection !/usr/bin/perl || || || -----------------------------------------\ == -- ----------- ---------------------------- ------------------/ ¡VIVA SPAIN!...¡GANAREMOS EL MUNDIAL!...o.O ¡PROUD TO BE SPANISH!...

Limbo CMS 1.0.4.2 CSRF Privilege Escalation PoC

Exploit for unknown platform in category web applications =============================================== Limbo CMS 1.0.4.2 CSRF Privilege Escalation PoC =============================================== Limbo cms v 1042Lt Cross-site request forgery Privilege Escalation Proof of Concept by Alfons...

ClanTiger 1.1.1 - Multiple Insecure Cookie Handling Vulnerabilities

ClanTiger 1.1.1 - Multiple Insecure Cookie Handling Vulnerabilities || || || -----------------------------------------\ == -- ----------- ---------------------------- ------------------/ ¡VIVA SPAIN!...¡GANAREMOS EL MUNDIAL!...o.O ¡PROUD TO BE SPANISH!...

ClanTiger 1.1.1 - 'slug' Blind SQL Injection

!/usr/bin/perl || || || -----------------------------------------\ == -- ----------- ---------------------------- ------------------/ ¡VIVA SPAIN!...¡GANAREMOS EL MUNDIAL!...o.O ¡PROUD TO BE SPANISH! ----------------------------------------------------------------------------------------------...

NanoCMS Detection

This host is running NanoCMS, a content management system. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Razor CMS 0.3RC2 XSS / Disclosure / Execution

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Multiple Vulnerability Disclosure for razorCMS - ---------------------------------------------- A recent security audit has uncovered multiple security vulnerabilities in the latest version 0.3RC2 and all previous versions of razorCMS CORE by Morgan...