580 matches found
Discuz! 2.0 - Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/37573/info Discuz! is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the...
Discuz 1.0 Cross Site Scripting
======================================================================================== | Title : Discuz Cross Site Scripting Vulnerability | Author : indoushka | email : [email protected] | Home : Souk Naamane - 04325 - Oum El Bouaghi - Algeria -00213771818860 | Total alerts found : 1 | Hig...
Discuz v1.0 XSS Vulnerability
No description provided by source. ======================================================================================== | Title : Discuz Cross Site Scripting Vulnerability | Author : indoushka | email : [email protected] | Home : Souk Naamane - 04325 - Oum El Bouaghi - Algeria...
Discuz! 1.0 - referer Cross-Site Scripting
Discuz! 1.0 - referer Cross-Site Scripting source: https://www.securityfocus.com/bid/37562/info Discuz! is prone to an cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in...
Discuz 1.03 - SQL Injection
Discuz 1.03 - SQL Injection ======================================================================================== | Title : Discuz Remote SQL Injection Exploit Vulnerability | Author : indoushka | email : [email protected] | Home : Souk Naamane - 04325 - Oum El Bouaghi - Algeria...
Discuz v1.0 SQL Injection Exploit Vulnerability
No description provided by source. ======================================================================================== | Title : Discuz Remote SQL Injection Exploit Vulnerability | Author : indoushka | email : [email protected] | Home : Souk Naamane - 04325 - Oum El Bouaghi - Algeria...
Discuz 1.03 - SQL Injection
======================================================================================== | Title : Discuz Remote SQL Injection Exploit Vulnerability | Author : indoushka | email : [email protected] | Home : Souk Naamane - 04325 - Oum El Bouaghi - Algeria -00213771818860 | Total alerts found :...
Discuz <= 1.03 SQL Injection Exploit Vulnerability
Exploit for unknown platform in category web applications ================================================== Discuz = 1.03 SQL Injection Exploit Vulnerability ================================================== =======================================================================================...
Discuz! 1.0 - 'referer' Cross-Site Scripting
source: https://www.securityfocus.com/bid/37562/info Discuz! is prone to an cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the...
Discuz! 6.0.0&6.1.0 spache.php SQL注入漏洞
No description provided by source...
discuz 6.1.0 database.inc.php 文件上传
No description provided by source...
discuz 6.1.0 跨站脚本漏洞
No description provided by source...
discuz 6.1.0 cache.func.php 信息泄漏漏洞
No description provided by source...
discuz 7.0 frame.php 跨站脚本漏洞
No description provided by source...
discuz 4.1.0 index.php 跨站脚本漏洞
No description provided by source...
discuz 6.1.0 Sql注入漏洞
No description provided by source...
discuz 6.1.0 member.php 跨站脚本漏洞
No description provided by source...
Discuz!NT 2.5 showuser.aspx SQL注入漏洞
No description provided by source...
Discuz! $_DCACHE 代码执行漏洞
测试版本： Discuz 6.x，7.x 漏洞成因： 1、使用全局变量 $GLOBALS'DCACHE' 时未作校验，导致攻击者可以在提交中构造恶意代码。 2、php函数 pregreplace 使用e修饰符时，将替换后的字符串作为php代码执行eval函数方式, 并使用执行结果作为实际参与替换的字符串。 验证方式： 1、进入本地测试地址：http://127.0.0.1/discuz7.2/Discuz7.2SCUTF8/upload/index.php 2、chrome F12 打开 console 设置 cookie，如图 3、如：依次点击进入【默认模块】-【7.2新增功能及功能强...