逐浪CMS任意SQL游走CMS2 V1.4 V1.5、 CMS6.0均受影响（其他版本死链未测）

简要描述： 问题出现在详细说明中 详细说明： 问题出现在 User\Develop\ashx\UserTage.ashx 代码片段： try MZoneNode MZN = new MZoneNode; BEditPage BEP = new BEditPage; MZN.NodeID = Convert.ToInt32nodeid; MZN.UserID = BU.GetLogin.UserID; string strTemp = style; string strStyle = strTemp.Split'|'; if strStyle != null foreach string...

Cart Engine 3.0.0 Database Backup Disclosure Vulnerability

Cart Engine version 3.0.0 suffers from a database backup disclosure vulnerability. ?php / Cart Engine 3.0.0 Database Backup Disclosure Exploit Vendor: C97net Product web page: http://www.c97.net Affected version: 3.0.0 Summary: Open your own online shop today with Cart Engine! The small, yet...

Kemana Directory 1.5.6 Database Backup Disclosure Vulnerability

Kemana Directory version 1.5.6 suffers from a database backup disclosure vulnerability. ?php / Kemana Directory 1.5.6 Database Backup Disclosure Exploit Vendor: C97net Product web page: http://www.c97.net Affected version: 1.5.6 Summary: Experience the ultimate directory script solution with...

qEngine CMS 6.0.0 - Multiple Vulnerabilities

qEngine CMS 6.0.0 - Multiple Vulnerabilities $total return; ifempty$starttime $starttime=time; $now = time; $perc=double$done/$total; $b...

Kemana Directory 1.5.6 Database Backup Disclosure

$total return; ifempty$starttime $starttime=time; $n...

qEngine CMS 6.0.0 - Multiple Vulnerabilities

$total return; ifempty$starttime $starttime=time; $now = time; $perc=double$done/$total; $bar=floor$perc$size; $disp=numberformat...

Cart Engine 3.0.0 - Database Backup Disclosure

Cart Engine 3.0.0 - Database Backup Disclosure ?php / Cart Engine 3.0.0 Database Backup Disclosure Exploit Vendor: C97net Product web page: http://www.c97.net Affected version: 3.0.0 Summary: Open your own online shop today with Cart Engine! The small, yet powerful and don't forget, FREE shopping...

Cart Engine 3.0.0 Database Backup Disclosure Exploit

Summary Open your own online shop today with Cart Engine! The small, yet powerful and don't forget, FREE shopping cart based on PHP & MySQL. Unique features of Cart Engine include: CMS engine based on our qEngine, product options, custom fields, digital products, search engine friendly URL, user...

Kemana Directory 1.5.6 Database Backup Disclosure Exploit

Summary Experience the ultimate directory script solution with Kemana. Create your own Yahoo or Dmoz easily with Kemana. Unique Kemana's features including: CMS engine based on our qEngine, multiple directories support, user friendly administration control panel, easy to use custom fields,...

Kemana Directory 1.5.6 - Database Backup Disclosure

Kemana Directory 1.5.6 - Database Backup Disclosure $total return; ifempty$starttime $starttime=time; $now = time...

Cart Engine 3.0.0 Database Backup Disclosure

?php / Cart Engine 3.0.0 Database Backup Disclosure Exploit Vendor: C97net Product web page: http://www.c97.net Affected version: 3.0.0 Summary: Open your own online shop today with Cart Engine! The small, yet powerful and don't forget, FREE shopping cart based on PHP & MySQL. Unique features of...

qEngine CMS 6.0.0 Database Backup Disclosure

$total return; ifempty$starttime $starttime=time; $now = time; $perc=double$d...

qEngine CMS 6.0.0 Database Backup Disclosure Vulnerability

qEngine CMS version 6.0.0 suffers from a database backup disclosure vulnerability. $total return;...

qEngine CMS 6.0.0 Database Backup Disclosure Exploit

Summary qEngine qE is a lightweight, fast, yet feature packed CMS script to help you building your site quickly. Using template engine to separate the php codes from the design, you don't need to touch the codes to design your web site. qE is also expandable by using modules. Description qEngine...

Kemana Directory 1.5.6 - Database Backup Disclosure

$total return; ifempty$starttime $starttime=time; $now = time; $perc=double$done/$total; $bar=floor$pe...

ThinkSAAS逻辑漏洞可致拖库

简要描述： ThinkSAAS的一个逻辑漏洞导致可以实时备份网站数据库，同时可以获取备份数据库文件名。 下载实时备份的数据库实现脱裤。漏洞影响所有版本。 详细说明： thinksaas系统使用常量INTS来控制页面的访问，然后在每个功能模块用一句代码： defined'INTS' or die'Access Denied.'; 来限制访问，这样设计带来的问题是，一个文件包含可以通杀，越权访问执行任意功能模块。 看到/app/user/action/plugin.php代码： fetchallassoc"SHOW TABLES"; foreach$arrTables as $key=$it...

WordPress Better WP Security 3.6.3 XSS / Disclosure

Exploit Title: Wordpress Plugin - Better WP Security multiple vulnerability Date: 2014 11 Fabruary Exploit Author: Yashar shahinzadeh Special thanks to Mormoroth Credit goes for: http://y-shahinzadeh.ir & ha.cker.ir Vendor Homepage: https://wordpress.org/plugins/better-wp-security/ Tested on: Lin...

CVE-2014-1637

Command School Student Management System 1.06.01 does not properly restrict access to sw/backup/backupray2.php, which allows remote attackers to download a database backup via a direct request...

CVE-2014-1637

CVE-2014-1637 affects Command School Student Management System 1.06.01. The issue is an improper access restriction on sw/backup/backup_ray2.php, allowing remote attackers to download a database backup via a direct request. Public exposure is indicated by referenced exploit information (Exploit-D...

CVE-2014-1637

Command School Student Management System 1.06.01 does not properly restrict access to sw/backup/backupray2.php, which allows remote attackers to download a database backup via a direct request...