227 matches found
SQL Injection Vulnerability in the bgComments Parameter of the Online Exam System of Shenzhen Biaochi Information Technology Co.
Enterprise Huitong Shenzhen Biaochi Electronics Co., Ltd. network education and training platform is a set of learning management, knowledge management, interactive network learning system for enterprises, schools, training institutions. SQL injection vulnerability exists in the bgComments...
齐博cms所有产品发现后门
简要描述： 在另一个地方又发现后门了，敢不放后门吗？ 还有，压缩包下载下来的时候，360直接报有phpshell，360都看不下去了 = = 详细说明： 齐博cms整站系统 后门文件 ../hack/upgrade/admin.php CRC32 28510105 以及剩下的存在于博客系统 下载系统 考试系统 黄页系统 新闻媒体系统 图片系统 视频系统 知道系统 企业系统 B2B系统 等等（反正官网所有的下载包里都有这个后门）文件在 ../hack/upgrade/admin.php CRC32 5101A2EE...
Digi Online Examination System 2.0 - Unrestricted File Upload Vulnerability
The Digi Online Examination System is a platform that enables all kinds of exams to be written on the computer. We offer great support and friendly help! The DOES is excellent for universities, colleges, training institutes and recruitment agencies to conduct online exams. it also supports YouTub...
Digi Online Examination System 2.0 - Unrestricted Arbitrary File Upload
Exploit Title: Digi Online Examination System Unrestricted File Upload Vulnerability Date: 12-10-2014 Exploit Author: Halil Dalabasmaz Version: v2.0 Software Link: http://codecanyon.net/item/digi-online-examination-system-does/8610180 Software Test Link: http://s1.digitalvidhya.com/doesv2/...
某通用在线考试系统可getshell、注册管理员等
简要描述： 某通用在线考试系统可getshell、注册管理员等 详细说明： 上海天柏信息科技有限公司的系统： 测试地址：http://www.timber2005.com/Productsy.html demo： http://exam1.timber2005.com/login.aspx 首先注册一个普通账号： 然后登陆： 之后直接访问： http://exam1.timber2005.com/system/systemconfig.aspx -======================================================= 这里有两个问题：...
The new concept of foreign language network teaching platform to upload files and repair programme-vulnerability warning-the black bar safety net
Information disclosure and privilege is not strict result in the column directory and upload To a certain University, for example: http://www.myhack58.com /NPELS NPELSLearningCenter5. 0 client Update. exe. config file leaked an important address setting name="UpdateCommonSvrCommonService"...