Design/Logic Flaw

An issue was discovered in DESTOON B2B 7.0. admin/category.inc.php has XSS via the categorycatname parameter to the admin.php URI...

Design/Logic Flaw

An issue was discovered in DESTOON B2B 7.0. admin\setting.inc.php has XSS via the first text box to the admin.php URI...

Cross site request forgery (csrf)

An issue was discovered in DESTOON B2B 7.0. CSRF exists via the admin.php URI in an action=add request...

CVE-2018-18433

An issue was discovered in DESTOON B2B 7.0. admin/category.inc.php has XSS via the categorycatname parameter to the admin.php URI...

CVE-2018-18431

An issue was discovered in DESTOON B2B 7.0. XSS exists via certain text boxes to the admin.php?moduleid=2&action=add URI...

CVE-2018-18432

An issue was discovered in DESTOON B2B 7.0. CSRF exists via the admin.php URI in an action=add request...

CVE-2018-18430

DESTOON B2B 7.0 contains an XSS vulnerability in admin/setting.inc.php reachable via the first text box to the admin.php URI. The issue is publicly documented across multiple sources (NVD entry CVE-2018-18430; CNVD/CVELIST entries) and is reflected with a CVSS profile indicating a MEDIUM base sev...

CVE-2018-18431

DESTOON B2B 7.0 contains a cross-site scripting (XSS) vulnerability exposed via text boxes when visiting admin.php?moduleid=2&action=add. The CVE entry and CNVD/NVD variants describe the same issue, with no explicit details on affected build flavors beyond version 7.0 and the vulnerable input poi...

CVE-2018-18432

Summary: DESTOON B2B 7.0 is affected by a CSRF vulnerability that can be exploited via the admin.php URI with an action=add request. Multiple sources (NVD entry CVE-2018-18432 and CNVD/NVD references) confirm a CSRF flaw in DESTOON B2B 7.0. The CVSS metrics indicate a network-based, high-severity...

CVE-2018-18430

An issue was discovered in DESTOON B2B 7.0. admin\setting.inc.php has XSS via the first text box to the admin.php URI...

CVE-2018-18433

DESTOON B2B 7.0 contains a cross-site scripting (XSS) vulnerability in admin/category.inc.php, exploitable via the category[catname] parameter to admin.php. Affected component is the admin interface; root cause is unescaped user input flowing into the response. Public sources (NVD/CNVD/CVE record...

File Upload Vulnerability in DESTOON B2B Website Management System

DESTOON B2B website management system is an open source B2B e-commerce industry portal solution based on PHP+MySQL. Currently, it has models of launchers, substations, malls, supply, requisition, quotation, companies, exhibitions, articles, information, PinPong, group purchasing, galleries,...

Destoon 6.0 guestbook.php generic SQL injection vulnerability

Source: https://www.leavesongs.com/PENETRATION/destoon-v6-0-sql-injection.html Author: phithon Just saw today released Destoon 6.0 2017-01-09 updated, with I in code auditing】small key ring in the said method, the moment to find the Fix a SQL injection vulnerability. By noon of 20 minutes, little...

Destoon 加解密函数引发伪造登录漏洞

No description provided by source...

destoon v6版 admin.php csrf 漏洞

No description provided by source...

destoon waf 绕过漏洞

No description provided by source...

destoon waf 绕过漏洞 （二）

简要描述： stripsql是destoon主要的安全防御函数。主要防御大多数情况下的注入漏洞。这个函数如果可以被绕过。那么会引发多个位置的注入漏洞。 详细说明： stripsql函数位于 \include\safe.func.php,38行 function stripsql$string, $type = 1 $match =...

destoon最新版注入(绕过过滤出任意数据)

简要描述： 我会告诉你是三次注入么. 详细说明： destoon最新版 漏洞文件:/module/club/mygroup.inc.php case 'add': if$MG'clubgrouplimit' && $limitused = $MG'clubgrouplimit' dalertlang$L'infolimit', array$MG'clubgrouplimit', $limitused, $MODULE2'linkurl'.$DT'filemy'.'?mid='.$mid.'&job='.$job; $needcaptcha = $MOD'captchagroup' == ...

Destoon B2B网站管理系统存储xss

简要描述： Destoon B2B网站管理系统存储xss，可打后台cookie 详细说明： 我们在修改资料的地方插入xss 查看源代码- - 发现没有做任何的过滤 alert/xss/"/ 我们既闭合value值，又成功地插入了xss 后台成功触发 因此我们继续，插入盗取cookie的xss代码 / 我们登录到后台查看，我们的xss平台已经收到管理的cookie了哈哈 img src="https://images.seebug.org/upload/201510/102143057723274dd523d46445acccd1b2083b65.p...

DESTOON某处注入可以直接提升为管理员

简要描述： DESTOON sql注入漏洞 详细说明： 首先看一个函数 :dhtmlspecialchars function dhtmlspecialchars$string ifisarray$string return arraymap'dhtmlspecialchars', $string; else $string = htmlspecialchars$string, ENTQUOTES, DTCHARSET == 'GBK' ? 'GB2312' : 'UTF-8'; $string = strreplace'&', '&', $string;...