dedecms(plus/feedback_js.php)injection vulnerability-vulnerability warning-the black bar safety net

Found by:Rainy'Fox&St0p Team:two fat network securityhttp://bbs.erpangzi.com Affected version: dedecms GBK 5.1 Vulnerability description: 文件 :plus/feedbackjs.php ifempty$arcID $row = $dlist-dsql-GetOne"Select id From @cachefeedbackurl where url='$arcurl' "; ifisarray$row $urlindex = $row'id'; Get...

Oracle Secure Backup Administration Server Authentication Bypass Vulnerability

This vulnerability allows remote attackers to bypass authentication on vulnerable installations of Oracle Secure Backup. User interaction is not required to exploit this vulnerability. The specific flaw exists in the logic used to authenticate a user to the administration server running on port...

CVE-2008-6841

PHP remote file inclusion vulnerability in the Green Mountain Information Technology and Consulting Database Query comdbquery component 1.4.1.1 and earlier for Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the mosConfigabsolutepath parameter to...

Remote file inclusion

PHP remote file inclusion vulnerability in the Green Mountain Information Technology and Consulting Database Query comdbquery component 1.4.1.1 and earlier for Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the mosConfigabsolutepath parameter to...

CVE-2008-6841

CVE-2008-6841 affects Joomla! with the com_dbquery component (versions 1.4.1.1 and earlier). The root cause is a PHP remote file inclusion via a URL in the mosConfig_absolute_path parameter passed to classes/DBQ/admin/common.class.php, enabling remote attackers to execute arbitrary PHP code. The ...

The new universal login password-vulnerability warning-the black bar safety net

Black hand 5 monthly on oldjun article, Others sample issues are all here,on TMB I received less than a-.-. Articles taken are as follows: There are many online such login authentication code % username=trimRequest. Form"username" password=trimRequest. Form"password" sql="Select FROM admin Where...

WP-Forum Plugin for WordPress 'forum_feed.php' 'thread' Parameter SQL Injection

The remote host is running WP-Forum, a third-party discussion forum plugin for WordPress. The version of WP-Forum installed on the remote host fails to sanitize input to the 'thread' parameter of the 'forumfeed.php' script before using it in a database query. Regardless of PHP's 'magicquotesgpc'...

Oempro index.php FormValue_Email Parameter SQL Injection Authentication Bypass

The remote host is running Oempro, a commercial list management and email marketing application written in PHP. The installed version of Oempro fails to sanitize user-supplied input to the 'FormValueEmail' parameter of the 'index.php' script before using it in a database query. An unauthenticated...

PhpWebGallery comments.php sort_by Parameter SQL Injection

The remote host is running PhpWebGallery, an open source photo gallery application written in PHP. The installed version of PhpWebGallery fails to sanitize user-supplied input to the 'sortby' parameter of the 'comments.php' script before using it in a database query. Regardless of PHP's...

Zen Cart products_id[] Array SQL Injection

The installed version of Zen Cart does not validate user-supplied input to the 'productsid' parameter array of the 'index.php' script when 'action' is set to 'multipleproductsaddproduct' before using the keys in a database query in the 'incartmixed' function in 'includes/classes/shoppingcart.php'...

phpBazar 2.0.2 (adid) Remote SQL Injection Vulnerability

No description provided by source. phpBazar SQL Injection Vulnerability all versions by: e.wiZz! info: Bosnian Idiot FTW! In the wild.... Script site : http://www.smartisoft.com/ Vulnerability: http://inthewild.com/INSTALL PATH/classified.php?catid=x&subcatid=x&adid=x SQL INJECTION PoC on demo...

phpBazar 2.0.2 (adid) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ======================================================== phpBazar 2.0.2 adid Remote SQL Injection Vulnerability ======================================================== phpBazar SQL Injection Vulnerability all versions by: e.wiZz! info:...

RTH login.php uname Parameter SQL Injection

The remote host is running RTH, a web-based software testing framework written in PHP. The version of RTH installed on the remote host fails to sanitize input to the 'uname' array parameter of the 'login.php' script before using it in a database query. Provided PHP's 'magicquotesgpc' setting is...

Plogger plog-download.php checked[] Parameter SQL Injection

The remote host appears to be running Plogger, an open source photo gallery written in PHP. The version of Plogger installed on the remote host fails to sanitize input to the 'checked' array parameter of the 'plog-download.php' script when 'dltype' is set to 'album' before using it in a database...

Symphony sym_auth Cookie SQL Injection

The version of Symphony installed on the remote host fails to sanitize user-supplied input to the 'symauth' cookie before using it in the 'login' function in 'lib/class.admin.php' in a database query. An unauthenticated attacker may be able to exploit this issue to manipulate database queries to...

joomladbquery-rfi.txt

@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@ @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@...

Ektron CMS400.NET WorkArea/ContentRatingGraph.aspx res Parameter SQL Injection

The remote host is running CMS400.NET, a .NET content management solution. The version of CMS400.NET installed on the remote host fails to sanitize user-supplied input to the 'res' parameter of the 'WorkArea/ContentRatingGraph.aspx' script before using it in a database query. An unauthenticated...

LifeType for Drupal (pLog) index.php albumId Parameter SQL Injection

The remote host is running pLog or Lifetype, an open source blogging platform written in PHP. The remote version of this software fails to sanitize user-supplied input to the 'albumId' parameter of the 'index.php' script before using it in a database query in the 'getAlbum' method in...

JP1/NETM/DM Manager SQL Injection Vulnerability

Overview JP1/NETM/DM Manager for Windows is vulnerable to SQL injection where a relational database is used as the JP1/NETM/DM database. This could allow attackers to execute arbitrary SQL command and/or corrupt database when it receives a malformed request. Impact An attacker could execute...

Coppermine Photo Gallery bridge/coppermine.inc.php Bridge Wizard Session Cookie SQL Injection

The version of Coppermine installed on the remote host fails to sanitize user-supplied input to the bridge wizard session cookie before using it in a database query in 'bridge/coppermine.inc.php'. Regardless of PHP's 'magicquotesgpc' setting, an attacker may be able to exploit this issue to...