1916 matches found
Authentication flaw
include/userlogin.class.php in DeDeCMS 5.5 GBK, when session.autostart is enabled, allows remote attackers to bypass authentication and gain administrative access via a value of 1 for the SESSIONdedeadminid parameter, as demonstrated by a request to uploads/include/dialog/selectsoftpost.php...
CVE-2010-1097
include/userlogin.class.php in DeDeCMS 5.5 GBK, when session.autostart is enabled, allows remote attackers to bypass authentication and gain administrative access via a value of 1 for the SESSIONdedeadminid parameter, as demonstrated by a request to uploads/include/dialog/selectsoftpost.php...
CVE-2010-1097
CVE-2010-1097 affects DeDeCMS 5.5 GBK, where enabling session.auto_start allows remote attackers to bypass authentication and gain administrative access by setting _SESSION[dede_admin_id] to 1, demonstrated via uploads/include/dialog/select_soft_post.php. The vulnerability stems from improper ses...
CVE-2010-1097: Improper Authentication
include/userlogin.class.php in DeDeCMS 5.5 GBK, when session.autostart is enabled, allows remote attackers to bypass authentication and gain administrative access via a value of 1 for the SESSIONdedeadminid parameter, as demonstrated by a request to uploads/include/dialog/selectsoftpost.php...
DedeCms v5. 5 vulnerability-vulnerability warning-the black bar safety net
? php printr' +----------------------------------------+ dedecms v5. 5 final getwebshell exploit +----------------------------------------+ '; if $argc 3 printr' +----------------------------------------+ Usage: php '.$ argv0.' host path host: target server ip/hostname path: path to dedecms...
dedecms woven dream v5. 5 more than the presence of cross-site vulnerability-vulnerability warning-the black bar safety net
Test code 1:http://www.dedecms.com/plus/search.php?keyword=%22%3E%3Ciframe%20src=http://www.51chi.net/qing%3E&searchtype=titlekeyword&channeltype=0&orderby=&kwtype=1&pagesize=1 0&typeid=0&TotalResult=%3Ciframe%20src=http://www. 51chi. net/qing%3E&PageNo=2 ! Test code 2:http://www. dedecms...
dedecms织梦 v5.5 两处跨站漏洞
北洋贱队http://bbs.seceye.org首发 demo1:http://www.dedecms.com/plus/search.php?keyword=%22%3E%3Ciframe%20src=http://www.gohack.org%3E&searchtype=titlekeyword&channeltype=0&orderby=&kwtype=1&pagesize=10&typeid=0&TotalResult=%3Ciframe%20src=http://www.gohack.org%3E&PageNo=2...
DEDECMS v5. 5 Final select_soft_post.php vulnerability-vulnerability warning-the black bar safety net
Author:st0p Today only from Wolves Security Team to see toby57 large cattle released"DEDECMS v5. 5 GBK Final one. vulnerability"this article,the original address:http://bbs.wolvez.org/topic/125/ Your own local testing a bit,covering the SESSION this little chicken threat is true,because the reque...
DeDeCMS 5.5 - _SESSION[dede_admin_id] Authentication Bypass
DeDeCMS 5.5 - SESSIONdedeadminid Authentication Bypass source: https://www.securityfocus.com/bid/38469/info DeDeCMS is prone to an authentication-bypass vulnerability because it fails to adequately verify user-supplied input. Attackers can exploit this issue to gain unauthorized access to the...
DeDeCMS 5.5 - '_SESSION[dede_admin_id]' Authentication Bypass
source: https://www.securityfocus.com/bid/38469/info DeDeCMS is prone to an authentication-bypass vulnerability because it fails to adequately verify user-supplied input. Attackers can exploit this issue to gain unauthorized access to the affected application. DeDeCMS GBK 5.5 is vulnerable; other...
DEDECMS v5. 5 GBK Final of a chicken-vulnerability-vulnerability warning-the black bar safety net
In the session. autostart turned on in the case can be arbitrarily to cover the$SESSION variable, we can forge the admin login and upload the file /DedeCmsV55-GBK-Final/uploads/include/dialog/selectsoftpost.php When uploading renamed to . php. You can bypass the check upload shell exp: | 1 2 3 4 ...
dedecmsV2. 1 The perfect edition to SQL injection Oday-vulnerability warning-the black bar safety net
Now DEDECMS impossible the emergence of a vulnerability, the weight STOP group outgoing..after that go to get a shell to fix vulnerabilities..$conn variable is not filtering! 漏洞 文件 :php/viewart.php ? requireonce"config.php"; requireonce"../manage/incmakeart.php"; ifisset$artID $ID=$artID; if!...
Woven dream CMS administrator password encryption methods can be restored MD516-a vulnerability warning-the black bar safety net
Today nothing else, get a buddies of the monitoring detecting, the sites do also quite large, something more, based on my many years of experience at a glance with that with the woven dream DEDECMS almost line, don't blow it. Website body by DEDECMS to build, and added a UcenterHome the SNS...
dedecms5. 3 to 5. 5 arbitrary file deletion 0day-vulnerability warning-the black bar safety net
Author: My5t3ry This tasteless exploits of the earliest made in the old General Forum, now online, also with 漏洞 存在 于 /member/editface.php 12-47 There are several documents also exist,forget,code is as follows: if$dopost=='save' $userdir = $cfguserdir.'/'.$ cfgml-mid correspondence between; if! er...
dedecms 5.x catalog_tree.php 跨站脚本攻击漏洞
No description provided by source...
Dedecms 5.x content_list.php 跨站脚本攻击漏洞
No description provided by source...
Dedecms 5.x article_keywords_select.php 跨站脚本攻击漏洞
No description provided by source...
Dedecms 5.x file_pic_view.php 跨站脚本攻击漏洞
No description provided by source...