Discuz!7.0-7.2后台settings.inc.php中写shell漏洞

漏洞详情： if$operation == 'uc' && iswriteable'./config.inc.php' && $isfounder $ucdbpassnew = $settingsnew'uc''dbpass' == '' ? UCDBPW : $settingsnew'uc''dbpass'; if$settingsnew'uc''connect' $ucdblink = @mysqlconnect$settingsnew'uc''dbhost', $settingsnew'uc''dbuser', $ucdbpassnew, 1; if!$ucdblink...

discuz 7.0 frame.php 跨站脚本漏洞

No description provided by source...

discuz 7.0 runwizard.inc.php 代码执行漏洞

No description provided by source...

Discuz! 7.0 number of plug-ins there are different degrees of vulnerability-vulnerability warning-the black bar safety net

Discuz! Is the domestic first large Forum, having gone through years of UPS and downs, the security can be said is also one of the best. But I find, more and more non-Discuz it! Official plug-in there is a security vulnerability, if not promptly repaired, may impact the entire site's security. He...

Discuz <=7.0(frame.php) xss Vulnerability

Discuz =7.0,这个xss 需要在开启了左右分栏的情况下才可以触发。 Discuz =7.0 http://www.discuz.net/ http://bbs..com/frame.php?frameon=yes&referer=http%3A//bbs.cctv.com/index.php%3Fgid%3D24%22%3E%3C/iframe%3E%3Cscript%3Ealert%28document.cookie%29%3C/script%3E...