Discuz 6.0 SQL Injection

Securitylab.ir Application Info: Name: Discuz Version: 6.0 Website: http://www.discuz.net Discoverd By: Securitylab.ir Website: http://securitylab.ir Contacts: adminatsecuritylab.ir & info@securitylabdotir Vulnerability Info: Type: Sql Injection Vulnerability Risk: Medium Dork: © 2008 - 2009...

Discuz!账号发放插件"2fly_gift.php" SQL注入漏洞

2Fly礼品序号发放系统 本插件可用于发布任何实物礼品、文字项目、序列号、帐号、推广等多方面应用。 存在过滤不严的问题。 V1.1.1 暂无 http://www.lanrengu.cn/lrbbs/2flyWorks.php...

Discuz! 6.0 - 2fly_gift.php SQL Injection

Discuz! 6.0 - 2flygift.php SQL Injection source: https://www.securityfocus.com/bid/36044/info Discuz! is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromis...

Discuz! 6.0 - '2fly_gift.php' SQL Injection

source: https://www.securityfocus.com/bid/36044/info Discuz! is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modify data,...

Discuz! Account the issuance of the plug-in injection 0day-vulnerability warning-the black bar safety net

Discuz! Account the issuance of the plug-in injection 0day Plugin name:2Fly giftnumberpayment system 漏洞 文件 :2flygift.php Version:latest version Exp:http://www. xxx. com/2flygift. php? pages=content&gameid=1 6 and 1=2 union select 1,2,3,4,concatusername,0x3a,password,6,7,8,9,1 0,1 1,1 2,1 3,1 4,1...

CVE-2008-6958

wap/index.php in Crossday Discuz! Board 6.x and 7.x allows remote authenticated users to execute arbitrary PHP code via the creditsformula parameter...

Design/Logic Flaw

member.php in Crossday Discuz! Board allows remote attackers to reset passwords of arbitrary users via crafted 1 lostpasswd and 2 getpasswd actions, possibly involving predictable generation of the id parameter...

CVE-2008-6957

member.php in Crossday Discuz! Board allows remote attackers to reset passwords of arbitrary users via crafted 1 lostpasswd and 2 getpasswd actions, possibly involving predictable generation of the id parameter...

Code injection

wap/index.php in Crossday Discuz! Board 6.x and 7.x allows remote authenticated users to execute arbitrary PHP code via the creditsformula parameter...

CVE-2008-6957

member.php in Crossday Discuz! Board allows remote attackers to reset passwords of arbitrary users via crafted 1 lostpasswd and 2 getpasswd actions, possibly involving predictable generation of the id parameter...

CVE-2008-6957

CVE-2008-6957 affects Crossday Discuz! Board (member.php) and allows remote attackers to reset passwords of arbitrary users via crafted lostpasswd and getpasswd actions, potentially due to predictable generation of the id parameter. The vulnerability is network-exposed with low attack complexity ...

CVE-2008-6958

wap/index.php in Crossday Discuz! Board 6.x and 7.x allows remote authenticated users to execute arbitrary PHP code via the creditsformula parameter...

CVE-2008-6958

CVE-2008-6958 affects Crossday Discuz! Board 6.x and 7.x. The vulnerability resides in wap/index.php where remote authenticated users can execute arbitrary PHP code via the creditsformula parameter. Evidence in multiple feeds confirms the issue and its description; no explicit mitigation or patch...

Discuz! admin\styles.inc.php get-webshell bug

在文件admin\styles.inc.php里代码: if$newcvar && $newcsubst if$db-resultfirst"SELECT COUNT FROM $tableprestylevars WHERE variable='$newcvar' AND styleid='$id'" cpmsg'styleseditvariableduplicate', '', 'error'; elseif!pregmatch"/a-zA-Z\x7f-\xffa-zA-Z0-9\x7f-\xff/", $newcvar cpmsg'styleseditvariableillegal...

Discuz! admin\styles.inc.php get-webshell bu-vulnerability warning-the black bar safety net

author: ring04h team:http://www. 80vul. com Due to Discuz! Admin\styles. inc. php in pregmatch regular judging$newcvar the variable operation is not precise enough, leading to code execution vulnerability. An analysis In file admin\styles. inc. php in the code: if$newcvar && $newcsubst...

Discuz! 7.0 and below the version background get a webshell without founder-vulnerability warning-the black bar safety net

Author: oldjun I rarely care about such vulnerability, it has been rarely take the stand, and encounters a DZ more just passing through, also did not go too much care about the DZ's vulnerability or to study the code; shortly before the Forum is left a shell, I check half a day, but since met, it...

Discuz!NT论坛多个文件变量过滤不严导致XSS攻击

Discuz!NT 版本中的usercpspacemanagealbum.aspx，usercpspacephotoadd.aspx等文件没有正确地过滤用户传递的albumtitle及多个变量只针对安装相册插件的版本。个人设置文件,usercpprofile.aspx文件没有正确地过滤用户传递realname,idcard。导致XSS攻击产生，可用于挂马，盗取网站敏感信息等一系列危害用户的危险行为！ http://www.bugging.com.cn/ Powered by Discuz!NT 2.6 以下 暂未通知，等待官方补丁 http://www.bugging.com.cn/...

Discuz! admindatabase.inc.php get-webshell bug-vulnerability warning-the black bar safety net

author: ring04h team:http://www. 80vul. com The vulnerability by ring04h discovery and delivery,thx Due to Discuz! Admin\database. inc. php in action=importzip extracting zip files,cause you can get a webshell. An analysis In file admin\database. inc. php in the code: ..... elseif$operation ==...

Discuz! 7.0 number of plug-ins there are different degrees of vulnerability-vulnerability warning-the black bar safety net

Discuz! Is the domestic first large Forum, having gone through years of UPS and downs, the security can be said is also one of the best. But I find, more and more non-Discuz it! Official plug-in there is a security vulnerability, if not promptly repaired, may impact the entire site's security. He...

Discuz! < 5.50论坛preg_match()函数未初始化$onlineipmatches变量漏洞

Discuz!是一款华人地区非常流行的Web论坛程序。 在Discuz!论坛的include/common.inc.php文件中： $magicquotesgpc = getmagicquotesgpc; @extractdaddslashes$COOKIE; @extractdaddslashes$POST; @extractdaddslashes$GET; //覆盖变量,这里我们可以覆盖$SERVER if!$magicquotesgpc $FILES = daddslashes$FILES; ..... ifgetenv'HTTPCLIENTIP' &&...