1703 matches found
CVE-2009-3806
SQL injection vulnerability in feedbackjs.php in DedeCMS 5.1 allows remote attackers to execute arbitrary SQL commands via the arcurl parameter...
CVE-2009-3806
CVE-2009-3806 describes an SQL injection in DedeCMS 5.1, specifically in feedback_js.php where the arcurl parameter can be manipulated to execute arbitrary SQL commands. The issue is exploitable remotely and can impact confidentiality, integrity, and availability according to the provided metrics...
CVE-2009-3806
SQL injection vulnerability in feedbackjs.php in DedeCMS 5.1 allows remote attackers to execute arbitrary SQL commands via the arcurl parameter...
织梦(Dedecms)select_soft_post.php页面变量未初始漏洞
漏洞产生文件位于include\dialog\selectsoftpost.php，其变量$cfgbasedir没有正确初始化，导致可以饶过身份认证和系统变量初始化文件，导致可以上传任意文件到指定目录。其漏洞利用前提是registerglobals=on,可以通过自定义表单为相关的变量赋值。 Dedecms 5.5 暂无 请关注官方补丁 html head titleDedecms v55 RCE Exploit Codz By flyh4t/title /head body style="FONT-SIZE: 9pt" ---------- Dedecms v55 RCE Exploi...
Dedecms select_soft_post. php page the variables are not the initial vulnerability-vulnerability warning-the black bar safety net
Text/ Flyh4t Affected versions: Dedecms 5.5 漏洞 产生 文件 位于 include\dialog\selectsoftpost.php, which is the variable$cfgbasedir not initialized properly, can lead to spare Through the identity authentication and system variable initialization file, cause you can upload any file to the specified...
织梦(DEDECMS) 5.1 plus/feedback_js.php存在注入漏洞
在magicquotesgpc=off的情况下可用 此漏洞可拿到后台管理员的帐号和加密HASH,漏洞存在文件plus/feedbackjs.php,未过滤参数为$arcurl ...... $urlindex = 0; ifempty$arcID $row = $dlist-dsql-GetOne"Select id From @cachefeedbackurl where url='$arcurl' "; //此处$arcurl没有过滤 ifisarray$row $urlindex = $row'id';...
DedeCMS <= 5.1 SQL Injection
Exploit for unknown platform in category web applications ============================ DedeCMS dsql-GetOne"Select id From @cachefeedbackurl where url='$arcurl' "; ifisarray$row $urlindex = $row'id'; ifempty$arcID && empty$urlindex exit; ...... ifempty$arcID $wq = " urlindex = '$urlindex' "; else...
DeDeCMS 5.1 - SQL Injection
Securitylab.ir Application Info: Name: DEDECMS Version: 5.1 Discoverd By: Securitylab.ir Website: http://securitylab.ir Contacts: adminatsecuritylab.ir & info@securitylabdotir Vulnerability Info: Type: Sql Injection Vulnerability Risk: Medium...
DedeCMS 5.1 SQL Injection
Securitylab.ir Application Info: Name: DEDECMS Version: 5.1 Discoverd By: Securitylab.ir Website: http://securitylab.ir Contacts: adminatsecuritylab.ir & info@securitylabdotir Vulnerability Info: Type: Sql Injection Vulnerability Risk: Medium...
DeDeCMS 5.1 - SQL Injection
DeDeCMS 5.1 - SQL Injection Securitylab.ir Application Info: Name: DEDECMS Version: 5.1 Discoverd By: Securitylab.ir Website: http://securitylab.ir Contacts: adminatsecuritylab.ir & info@securitylabdotir Vulnerability Info: Type: Sql Injection Vulnerability Risk: Medium...
DedeCMS 5.1 SQL Injection
No description provided by source. Securitylab.ir Application Info: Name: DEDECMS Version: 5.1 Discoverd By: Securitylab.ir Website: http://securitylab.ir Contacts: adminatsecuritylab.ir & info@securitylabdotir Vulnerability Info: Type: Sql Injection Vulnerability Risk: Medium...
DEDECMS v5.1 Sql Injection Vulnerability
Securitylab.ir Application Info: Name: DEDECMS Version: 5.1 Discoverd By: Securitylab.ir Website: http://securitylab.ir Contacts: adminatsecuritylab.ir & info@securitylabdotir Vulnerability Info: Type: Sql Injection Vulnerability Risk: Medium...
DEDECMS 5.1 feedback_js.php 0DAY-vulnerability warning-the black bar safety net
Author:st0p&Rainy'Fox The same is on magicquotesgpc=off case available Vulnerability version:DEDECMS 5.1 This vulnerability can get to the backend Administrator's account and the encrypted HASH,漏洞 存在 文件 plus/feedbackjs.php,not a Filter parameter for$arcurl ...... $urlindex = 0; ifempty$arcID $row...
dedecms(plus/feedback_js.php)injection vulnerability-vulnerability warning-the black bar safety net
Found by:Rainy'Fox&St0p Team:two fat network securityhttp://bbs.erpangzi.com Affected version: dedecms GBK 5.1 Vulnerability description: 文件 :plus/feedbackjs.php ifempty$arcID $row = $dlist-dsql-GetOne"Select id From @cachefeedbackurl where url='$arcurl' "; ifisarray$row $urlindex = $row'id'; Get...
DEDECMS novel series module 0DAY-vulnerability warning-the black bar safety net
Author: st0p Can be reproduced, but please indicate the source: http://www. st0p. org Since this hole appears in the DEDECMS novel series module, so as long as DEDECMS installed when selected fiction series module, then the presence of this problem, some versions in the conditions permit under ca...
织梦(dedecms)V5.5分页处理函数信息泄露漏洞
系统用intval对$pageno的值进行了处理，但是intval处理过程中，如果为非正整数时，会赋值为0，系统就会出错。 $pageno = isset$pageno && isnumeric$pageno ? max1,$pageno : 1; 没有对0进行过滤处理。 You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near '-15,15' at line 7 - Execu...
织梦(dedecms)5.3 – 5.5 plus/digg_frame.php 注入漏洞
No description provided by source...
DedeCMS V5. 3 exp-vulnerability warning-the black bar safety net
Delete the Site any file. 2. Proof absolute path The impact of the system = DedeCMS V5. 3 1. Delete any file. Registration of normal users...feel free to find a place to upload an attachment it is OK. Part of the code: Copy the code form name="form1" action="http:// 网站 地址...
Dedecms explosive path vulnerability-vulnerability warning-the black bar safety net
As long as you know the directory name can Select"File Management"Point below the"Start Search" In the following"need to clean up the Upload Directory is"write directory such as "../admin" "../data" The point of"clear bit log file" Can storm out of the data under the database file ! admin directo...
DEDECMS XDAY-vulnerability warning-the black bar safety net
Author: st0p In this record look, Hey, this hole but Jack crash two found. Quite a YD., but also to help me find the two ROOT privileges.。 This vulnerability to st0p and Jack found that copyright did not, welcome to reprint! Why call XDAY not called 0DAY, because this hole relatively chaotic, the...