Discuz X1-x1. 5 Blind SQL injection Getshell Xday-vulnerability warning-the black bar safety net

? php printr' +---------------------------------------------------------------------------+ Discuz! X1-1.5 notifycredit.php Blind SQL injection exploit by toby57 2010.11.05 mail: toby57 at 1 6 3 dot com team: http://www.wolvez.org...

Discuz! X1-1.5 notify_credit.php Blind SQL injection exploit

No description provided by source. ?php printr' +---------------------------------------------------------------------------+ Discuz! X1-1.5 notifycredit.php Blind SQL injection exploit by toby57 2010.11.05 mail: toby57 at 163 dot com team: http://www.wolvez.org...

Discuz! X1某页面存在XSS漏洞

简要描述： 页面对取到的参数没有过滤，直接echo到了html里。 详细说明： api/db/dbbak.php页面，对$apptype缺少必要的过滤，调用apimsg函数时直接将$apptype echo到了html中。 漏洞证明： http://www.discuz.net/api/db/dbbak.php?apptype=1%22%3E%3Cscript%3Ealert1%3C/script%3E%3C%22...