3245 matches found
TinyShop sql注入#3（ 可无限充值）
简要描述： rt 详细说明： 我们看到 /protected/controllers/ucenter.php public function infosave $name = Filter::sqlReq::args"name"; $id = $this-user'id'; $this-model-table"user"-dataarray"name"=$name-where"id=$id"-update; $this-model-table"customer"-where"userid=$id"-update; $obj = $this-model-table"user as...
PHP-Nuke <= 8.0 XSS & HTML Code Injection in News Module
No description provided by source. Software Link: http://www.phpnuke.org/modules.php?name=Downloads&dop=viewdownload&cid=1 -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= note : This bug found by tampering passed data . coders don't sanitize and check user entry point for news rate...
RelateIQ: Failed Certificate Validation On Custom Server (Register)
Hi, in the register page a custom server can be used to define "where to connect to". Your system does not validate the SSL certificate of this host which makes it easy to tamper with the data your system do in behalf of the user. As only SSL links are allowed by the application the user could...
74cms 逻辑漏洞导致sql注入
简要描述： 74cms 逻辑漏洞导致sql注入 详细说明： include/funpersonal.php381-398 $j=getresumebasic$uid,$pid; $searchtab'sex'=$j'sex'; $searchtab'nature'=$j'nature'; $searchtab'marriage'=$j'marriage'; $searchtab'experience'=$j'experience'; $searchtab'district'=$j'district'; $searchtab'sdistrict'=$j'sdistrict';...
Talking about my company for security emergency response-vulnerability warning-the black bar safety net
0×0 0 hack to. Company for hack attacks emergency treatment is still very lacking, that there are security issues, is often the customers are also the victims because the customers found that their data be changed, and then complain to the company that the data what is the malicious changes. Then...
Ali cloud according to the amount of payment logic vulnerabilities a gold（cheap enjoy Super host-vulnerability warning-the black bar safety net
To Description: Ali cloud cloud host purchase logic design is not tight, after a base64 encoding of the data can be tampered with, and the rear end will accept the tampering of the data, and can forge a super host. The need to spend 2 0 1 5 $ 8/month host only need 9 3 6 Yuan/month（see Figure） ! ...
Haraj Script Stored XSS and File Upload Vulnerability
You Can Upload file And make come Xss code ! at Once ,, in famous arabic scripth php Haraj script . ============================= 1: first enter to site of our target , and signup in the target site . 2: go to HTTP://TARGET.COM/home/add/ or HTTP://TARGET.COM/homeadd.html or or...
Microsoft ASP.NET PKCS Padding Information Disclosure (MS10-070; CVE-2010-3332)
An information disclosure vulnerability has been reported in ASP.NET. This vulnerability is caused by ASP.NET providing web clients details in error messages when decrypting certain ciphertext. Successful exploitation of this vulnerability could allow the attacker to read and tamper with data. If...
anwsion问答系统存在任意文件上传重大漏洞
简要描述： 上传只做了js验证貌似 详细说明： 本人只在topic话题下上传了，貌似头像上传那里也存在该问题（没测试） 点击话题图像，就可以编辑上传图像了。 使用火狐的TAMPER DATA插件，并打开开始截获。 选择一个2bb.jpg（内涵php一句话的正常图片即可 该文件目录内还有一个2bb.php（留作备用 在tamaper data内修改数据，把2bb.JPG改成2bb.php即可 就可以看到上传上去的php图片小马了，但是这个是经过处理的 只要把url后面的100X100参数或者50x50参数去除，就可以得到一个没有经过处理的PHP小马了。 漏洞证明： 官方已经拿到shell了...
extension): MITM due to improper validation of AX attribute signatures
message/ax/AxMessage.java in OpenID4Java before 0.9.6 final, as used in JBoss Enterprise Application Platform 5.1 before 5.1.2, Step2, Kay Framework before 1.0.2, and possibly other products does not verify that Attribute Exchange AX information is signed, which allows remote attackers to modify...
Security advisory: SQL Injection in LedgerSMB 1.2.24 and lower
Hi all; The LedgerSMB development team has found an SQL injection issue in LedgerSMB 1.2.24. Because this issue stems from our common SQL-Ledger heritage, it affects all versions of LedgerSMB and has been confirmed in SQL-Ledger 2.8.33. We contacted Dieter when we initially discovered this and no...
MS10-086: Vulnerability in Windows Shared Cluster Disks Could Allow Tampering (2294255)
The remote Windows 2008 R2 host has a data tampering vulnerability. When the host is used as a shared failover cluster, the Failover Cluster Manager uses insecure default permissions when adding disks to a cluster. This allows unauthorized read, write, and delete access to the administrative shar...
Microsoft Security Bulletin MS10-086 - Moderate Vulnerability in Windows Shared Cluster Disks Could Allow Tampering (2294255)
Microsoft Security Bulletin MS10-086 - Moderate Vulnerability in Windows Shared Cluster Disks Could Allow Tampering 2294255 Published: October 12, 2010 Version: 1.0 General Information Executive Summary This security update resolves a privately reported vulnerability in Windows Server 2008 R2 whe...
Microsoft Releases Security Bulletin MS10-070
Microsoft has released Microsoft Security Bulletin MS10-070 to address a vulnerability affecting ASP.NET. Exploitation of this vulnerability may allow an attacker to obtain sensitive information or tamper with data. US-CERT encourages users and administrators to review Microsoft Security Bulletin...
Microsoft Releases Security Advisory 2416728
Microsoft has released a security advisory to alert users of a vulnerability affecting ASP.NET. Exploitation of this vulnerability may allow an attacker to obtain sensitive information or tamper with data. US-CERT encourages administrators to review Microsoft security advisory 2416728 and apply a...
Multiple HTTP Error Responses (CVE-2010-3332)
ASP.NET is a collection of technologies within the.NET Framework that enable developers to build Web applications and XML Web Services. A remote attacker may exploit this issue to read data, such as the View State, which was encrypted by the server. This vulnerability is caused by ASP.NET providi...
Internet Navigware Server Information Disclosure Vulnerability
Overview Internet Navigware Server is vulnerable to information disclosure or data tampering. Impact A remote attacker could disclose or alter information. Solution Please refer to the 'Vendor Information' section for the official countermeasure and take appropriate action...
PHP-Nuke <= 8.0 XSS & HTML Code Injection in News Module
Exploit for unknown platform in category web applications ======================================================== PHP-Nuke alert/XSS/.source 2. Html code injection : -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= 0day.today 2018-03-19...
PHP-Nuke <= 8.0 XSS & HTML Code Injection in News Module
No description provided by source. Software Link: http://www.phpnuke.org/modules.php?name=Downloads&dop=viewdownload&cid=1 -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= note : This bug found by tampering passed data . coders don't sanitize and check user entry point for news rate...
PHP-Nuke 8.0 - News Module Cross-Site Scripting HTML Code Injection
PHP-Nuke 8.0 - News Module Cross-Site Scripting HTML Code Injection Software Link: http://www.phpnuke.org/modules.php?name=Downloads&dop=viewdownload&cid=1 -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= note : This bug found by tampering passed data . coders don't sanitize and che...