575 matches found
PHPWIND & DISCUZ! CSRF vulnerability-vulnerability warning-the black bar safety net
PHPWIND & DISCUZ! CSRF vulnerability affects versions: Discuz! 6.0.0 & 6.1.0 & 7.0.0 PHPWIND 6.0 & 6.3 & 7.0 Vulnerability description: PHPWIND & DISCUZ! The presence of CSRF vulnerabilities, triggering PHPWIND & DISCUZ! CSRF WORM! ... d/b31e4d2e6270c384 reference ... d/b31e4d2e6270c384 Safety...
Discuz! Forum the wap function module coding injection vulnerability-vulnerability warning-the black bar safety net
Information source: evil octal information security team www.eviloctal.com） Author: ainideX Affected version: Discuz! 4.0.0 Discuz! 4.1.0 Discuz! 5.0.0 Discuz! 5.5.0 Discuz! 6.0.0 Discuz! 6.1.0 Description: Discuz! The forum system is a PHP and MySQL such as a variety of other databases to build...
Discuz! 6. x/7. x SODB-2 0 0 8-1 3 Exp-vulnerability warning-the black bar safety net
!/ usr/bin/php ? php / Discuz! 6. x/7. x SODB-2 0 0 8-1 3 Exp By www.80vul.com notes the value of the variable, add your own to modify / $host = 'www.80vul.com'; // Server domain or IP $path = '/discuz/'; // Where the program path $key = 0; // The above variable is edited, make will the value her...
PHPWIND & DISCUZ! CSRF漏洞
PHPWIND & DISCUZ!存在CSRF漏洞，引发PHPWIND & DISCUZ! CSRF WORM!br / http://groups.google.com/group/ph4nt0m/browsethread/thread/b31e4d2e6270c384 Discuz! 6.0.0 & 6.1.0 & 7.0.0 PHPWIND 6.0 & 6.3 & 7.0 DISCUZ删除templates/default/header.htm 里面的 $seohead就可以了。 暂无，等待官方补丁。 http://hk.chinakernel.org/worm.tar.gz...
Discuz! 6. x/7. x SODB-2 0 0 8-1 3 Exp full automatically obtain the SHELL with the log-vulnerability warning-the black bar safety net
＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝Discuz.php＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝ !/ usr/bin/php ? php / Discuz! 6. x/7. x SODB-2 0 0 8-1 3 Exp By www.80vul.com Notes the value of the variable, add your own modifications / if $argc3 printr' -------------------------------------------------------------------------------- Usage...
DISCUZ all versions of COOKIE hijacking method+DEMO-vulnerability warning-the black bar safety net
DISCUZ and many forums are unable to perform session hijacking, because the session and IP binding, DISCUZ main session authentication mechanism is as follows: /inlude/common.inc.php //Section 1 3 6 verify the session important period is from the sessions table in the query the SID, which is an...
4 5 You can obtain the Webshell program-vulnerability warning-the black bar safety net
1: Go to GoogLe,search some keywords,edit. asp? Korean broiler chickens is more,the majority of MSSQL database! 2,to Google ,site:cq. cn inurl:asp 3, The use of mining chicken and an ASP Trojan. The file name is login. asp ...... The path set is/manage/ The key word is went. asp 'Or'='or'to login...
Discuz! 6.1 xss2webshell Exploit-vulnerability warning-the black bar safety net
/ Discuz! 6.1 xss2webshellSODB-2 0 0 8-1 0 Exploit by 80vul-A team: http://www.80vul.com / //Target url var siteurl='http://www.80vul.com/Discuz6.1.0/'; var request = false; ifwindow. XMLHttpRequest request = new XMLHttpRequest; ifrequest. overrideMimeType request. overrideMimeType'text/xml'; els...
Discuz! admin/database.inc.php get-webshell bug
由于Discuz!的admin\database.inc.php里action=importzip解压zip文件时,导致可以得到webshell.br / 在文件admin\database.inc.php里代码:br / .....br / elseif$operation == 'importzip' br / br / requireonce DISCUZROOT.'admin/zip.func.php';br / $unzip = new SimpleUnzip;br / $unzip-ReadFile$datafileserver;br / if$unzip-Count == ...
Discuz! 6.1 xss2webshell Exploit
No description provided by source. / Discuz! 6.1 xss2webshellSODB-2008-10 Exploit by 80vul-A team: http://www.80vul.com / //目标url var siteurl='http://www.80vul.com/Discuz6.1.0/'; var request = false; ifwindow.XMLHttpRequest request = new XMLHttpRequest; ifrequest.overrideMimeType...
Discuz! 6. x/7. x SODB-2 0 0 8-1 3 Exp-vulnerability warning-the black bar safety net
| !/ usr/bin/php ? php / Discuz! 6. x/7. x SODB-2 0 0 8-1 3 Exp By www.80vul.com Notes the value of the variable, add your own modifications / $host = 'www.80vul.com'; // Server domain or IP $path = '/discuz/'; // Where the program path $key = 0; // The above variable is edited, make will the val...
Discuz! Remote Reset User Password Exploit
No description provided by source. !/usr/bin/php ?php printr' +---------------------------------------------------------------------------+ Discuz! Reset User Password Exploit by 80vul team: http://www.80vul.com +---------------------------------------------------------------------------+ '; if...
Discuz! Remote Reset User Password Exploit
Exploit for unknown platform in category web applications ========================================== Discuz! Remote Reset User Password Exploit ========================================== !/usr/bin/php ?php printr' +---------------------------------------------------------------------------+ Discu...
Discuz! - Remote Reset User Password
Discuz! - Remote Reset User Password !/usr/bin/php ?php printr' +---------------------------------------------------------------------------+ Discuz! Reset User Password Exploit by 80vul team: http://www.80vul.com +---------------------------------------------------------------------------+ '; if...
Discuz! - Remote Reset User Password
!/usr/bin/php ?php printr' +---------------------------------------------------------------------------+ Discuz! Reset User Password Exploit by 80vul team: http://www.80vul.com +---------------------------------------------------------------------------+ '; if $argc 6 printr'...
Discuz! Reset User Password Vulnerability
由于Discuz! 的随机数使用的播种缺陷,在找会用户密码时可以暴力得到id的随机hash,从而导致容易修改用户密码的严重漏洞.br / Discuz 5.x/6.x/7.x 暂无，等待官方补丁 !/usr/bin/php ?php printr' +---------------------------------------------------------------------------+ Discuz! Reset User Password Exploit by 80vul team: http://www.80vul.com...
Discuz! 6.x/7.x $_DCACHE数组变量覆盖漏洞 Check
No description provided by source. !/bin/bash Discuz! 6.x/7.x SODB-2008-13 Check By heihei@安全小站群 文件中googlepagecount参数是 google搜索结果的页数，大于0就可以，太大了，google会认为是自动机而停止处理！ 开启WAP注册的结果URL列表保存在当前目录下urllist 修正 cnb|rd@SEBUG 需要自己修改countPage，因为googlepagecount多了google就以为是病毒呢 countPage=10 flag=0 while "$flag" -lt...
Discuz! 6. x/7. x SODB-2 0 0 8-1 3 Exp full automatically obtain the SHELL with the log-vulnerability warning-the black bar safety net
＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝Discuz.php＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝ !/ usr/bin/php ? php / Discuz! 6. x/7. x SODB-2 0 0 8-1 3 Exp By www.80vul.com Notes the value of the variable, add your own modifications / if $argc3 printr' -------------------------------------------------------------------------------- Usage...
DZ! sodb-2 0 0 8-1 3 EXP published-vulnerability warning-the black bar safety net
!/ usr/bin/php ? php / Discuz! 6. x/7. x SODB-2 0 0 8-1 3 Exp By www.80vul.com Notes the value of the variable, add your own modifications / $host = ‘www.80vul.com’; // Server domain or IP $path = ‘/discuz/’; // Where the program path $key = 0; // The above variable is edited, make will the value...
Discuz! 6. x/7. x SODB-2 0 0 8-1 3 Exp-vulnerability warning-the black bar safety net
!/ usr/bin/php ? php / Discuz! 6. x/7. x SODB-2 0 0 8-1 3 Exp By www.80vul.com Notes the value of the variable, add your own modifications / $host = 'www.80vul.com'; // Server domain or IP $path = '/discuz/'; // Where the program path $key = 0; // The above variable is edited, make will the value...