CSCMS在app/controllers/api/count.php中存在sql注入

No description provided by source...

clamsex.com Open Redirect vulnerability

Vulnerable URL: http://clamsex.com/count.php?url=https://www.xssposed.org/ Details: Description| Value ---|--- Patched:| Yes, at 26.07.2017 Latest check for patch:| 26.07.2017 11:39 GMT Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculat...

Pivot 1.40.6 - Remote Arbitrary File Deletion Vulnerability

No description provided by source. Pivot 1.40.6 Remote File Delete Alfons Luja Vuln : extensions/bbclonetools/hrconf.php line 20 ... $bbclonedebug = false; //is never change ... ========================================================= extensions/bbclonetools/count.php ... if $GETrefkey!= &&...

Pivot 1.40.6 Remote Arbitrary File Deletion Vulnerability

No description provided by source. Pivot 1.40.6 Remote File Delete Alfons Luja Vuln : extensions/bbclonetools/hrconf.php line 20 ... $bbclonedebug = false; //is never change ... ========================================================= extensions/bbclonetools/count.php ... if $GET"refkey"!="" &&...

Pivot 1.40.6 - Arbitrary File Deletion

Pivot 1.40.6 - Arbitrary File Deletion Pivot 1.40.6 Remote File Delete Alfons Luja Vuln : extensions/bbclonetools/hrconf.php line 20 ... $bbclonedebug = false; //is never change ... ========================================================= extensions/bbclonetools/count.php ... if $GET"refkey"!=""...

CVE-2007-4170

Multiple PHP remote file inclusion vulnerabilities in AL-Athkar 2.0 allow remote attackers to execute arbitrary PHP code via a URL in the 1 include parameter to a Main.php and b get.php and the 2 exec parameter to c count.php...

CVE-2007-4170: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in AL-Athkar 2.0 allow remote attackers to execute arbitrary PHP code via a URL in the 1 include parameter to a Main.php and b get.php and the 2 exec parameter to c count.php...

Sql injection

SQL injection vulnerability in count.php in Skull-Splitter PHP Downloadcounter for Wallpapers 1.0 allows remote attackers to execute arbitrary SQL commands via the 1 countfieldname, 2 urlfieldname, or 3 url parameter...

CVE-2006-1328

SQL injection vulnerability in count.php in Skull-Splitter PHP Downloadcounter for Wallpapers 1.0 allows remote attackers to execute arbitrary SQL commands via the 1 countfieldname, 2 urlfieldname, or 3 url parameter...

CVE-2006-1328

The CVE concerns Skull-Splitter’s PHP Downloadcounter for Wallpapers 1.0. Vulnerable file: count.php; vulnerable parameters: count_fieldname, url_fieldname, and url. The underlying cause is unsanitized input used in SQL queries, enabling remote SQL injection. Exploitation details are supported by...

CVE-2006-1328: Undefined Security Weakness

SQL injection vulnerability in count.php in Skull-Splitter PHP Downloadcounter for Wallpapers 1.0 allows remote attackers to execute arbitrary SQL commands via the 1 countfieldname, 2 urlfieldname, or 3 url parameter...