580 matches found
DISCUZ EDITPOST file SQL injection vulnerability-vulnerability warning-the black bar safety net
Affected system: Discuz! Discuz! 7. x Discuz! Discuz! 6. x Discuz! Discuz! 5. x Not affected system: Discuz! Discuz! 7. x Description: -------------------------------------------------------------------------------- Discuz! Is with PHP the development of Internet forum software. Discuz! 5. x, 6...
Discuz 5. x/6. x/7. x-poll SQL injection analysis-vulnerability warning-the black bar safety net
Look at the clouds someone proof this vulnerability: Feel should be the editpost. inc. php in the voting vulnerabilities. Because dz has been determined no longer to patch 7. x previous vulnerability, so directly attached to the details. The problem is in the editpost. inc. php 2 8 1 line of...
Discuz 5.x 6.x 7.x 前台SQL注入漏洞一枚
简要描述： 自从补课补完了 感觉自己都完全荒废了。 睡觉 看电视 看小说。 唉。 得开始努力学习考大学 哦也。 看到map牛 发了几个dz7.2的 也看到还在更新 我也就看了看 前台注入一枚, 也都知道 如果ucenter 和 DZ 在一个裤里面的话就可以拿到uckey 拿到uckey了 然后……。 很简单的一个洞。 详细说明： http://download.discuz.net/Discuz/7.2/Discuz7.2SCGBK.zip 刚在官网下的这个。 首先说一下 这洞需要有权限发布投票才行 刚注册的会员是不能发布投票的 我看了下默认发布投票需要的权限...
discuz 7.2&discuz x<=2 后台注入
简要描述： 第二发 详细说明： 以dz7.2来说，漏洞位于task.php 57行， $query = $db-query"SELECT t., mt.csc, mt.dateline FROM $tablepretasks t LEFT JOIN $tablepremytasks mt ON mt.taskid=t.taskid AND mt.uid='$discuzuid' WHERE $sql AND t.available='2' $newbieadd ORDER BY displayorder, taskid DESC LIMIT $startlimit, $tpp";...
Discuz NT3.1 版本可利用恶意图片进行XSS攻击
简要描述： 好吧，纯粹业余的，在使用公司内部论坛的时候无意间发现的，百度谷歌都没搜到类似的报告，姑且认为这个漏洞没过时吧…… 详细说明： 程序解析图片Exif信息所致。 首先，图片详细信息我们可以自己编辑，如图： 然后，回帖添加附件的时候只要不插入附件就可以让页面读取图片exif信息并运行脚本，就像这样…… 漏洞证明：...
Discuz 7.2 /post.php 跨站脚本漏洞
No description provided by source...
Discuz <= 7.2 SQL injection vulnerability details-vulnerability warning-the black bar safety net
Is said to be a digital company of the emergency response to the release out. The group inside the small partners are shocked, the specific vulnerability analysis see this article Wherein the In the senior PHP application vulnerability auditing techniques of1an article in the"magic quotes brought...
Discuz! 7.2 SQL injection exp（getshell Edition-vulnerability warning-the black bar safety net
? php / @author: xiaoma @blog : www.i0day.com @date : 2014.7.2 2 3:1 / errorreporting0; settimelimit3 0 0 0; $host=$argv1; $path=$argv2; $js=$argv3; $timestamp = time+1 03 6 0 0; $table=”cdb”;//table name if $argc 2 printr‘ Discuz faq.php SQL Injection Exp ---By: A Www.i0day.com---- Usage: php ‘....
建站之星Sitestar官方注入漏洞
简要描述： 注入 详细说明： http://bbs.sitestar.cn/faq.php?action=grouppermission&gids99='&gids1000=%20and%20select%201%20from%20select%20count,concatversion,floorrand02x%20from%20informationschema.tables%20group%20by%20xa%23 漏洞证明： Discuz! info: MySQL Query Error Time: 2014-7-2 4:59pm Script: /faq.php SQL:...
Discuz 7.2 /faq.php SQL注入漏洞
elseif$action == 'grouppermission' ... ... ksort$gids; $groupids = array; foreach$gids as $row $groupids = $row0; $query = $db-query"SELECT FROM $tablepreusergroups u LEFT JOIN $tablepreadmingroups a ON u.groupid=a.admingid WHERE u.groupid IN ".implodeids$groupids."";...
Discuz 7.2 /faq.php SQL注入漏洞 + UC_Key getshell exp
No description provided by source...
Discuz! 1.0 'referer' Parameter Cross Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/37562/info Discuz! is prone to an cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the...
Crossday Discuz! 2.0/3.0 Cross Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/9584/info It has been reported that Discuz! is prone to an Cross Site Scripting vulnerability. This issue is caused by the application failing to properly sanitize links embedded within user messages. Upon successful...
Discuz! 6.0 '2fly_gift.php' SQL Injection Vulnerability
No description provided by source...
Discuz! 2.0 Multiple Cross Site Scripting Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/37573/info Discuz! is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues to execute arbitrary script code in the...
Discuz! Plugin JiangHu <= 1.1 (id) SQL Injection Vulnerability
No description provided by source. ========================================================= Discuz! Plugin JiangHu = 1.1 Sql injection Vulnerability ========================================================= ========================Author========================= + Founded : ZhaoHuAn + Contact :...
Discuz <= 1.03 SQL Injection Exploit Vulnerability
No description provided by source...
Discuz! Plugin Crazy Star <= 2.0 (fmid) SQL Injection Vulnerability
============================================================ Discuz! Plugin Crazy Star = 2.0 Sql injection Vulnerability ============================================================ ========================Author============================ + Founded : ZhaoHuAn + Contact :...
Discuz! 6.0 'tid' Parameter Cross Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/37982/info Discuz! is prone to an cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the...