XSS Vulnerability in FoosunCMS

FoosunCMS content management system FoosunCMS is a content management software based on ASP + ACCESS/MSSQ framework, a domestic open source, integrated web2.0 elements, modular CMS station-building system. FoosunCMS has a stored cross-site scripting vulnerability. Attackers can insert malicious j...

FoosunCMS SQL Injection Vulnerability

FoosunCMS is a content management software based on ASP+ACCESS/MSSQ architecture. FoosunCMS version 1.0 to 2.0 has a SQL injection vulnerability, because the system does not filter the CityId parameter. Allow attackers to exploit the vulnerability to obtain sensitive information in the database...

Foosun CMS v4. 0 /user/SetNextOptions. asp parameters ReqSql SQL injection vulnerability

No description provided by source...

Foosun cms .net版本 City_ajax.aspx 参数 id SQL注入漏洞

0x01漏洞简介 Foosun cms .net版本在/user/Cityajax.aspx对参数Cityid过滤不严格，导致出现SQL注入漏洞。远程攻击者可以利用该漏洞执行SQL指令，获取敏感信息。 0x02漏洞详情 SQL注入漏洞：/user/Cityajax.aspx?Cityid=1 http://.../user/Cityajax.aspx?Cityid=1 数据和用户 0x03修复方案 过滤，或者使用参数化的SQL语句。...

风讯(foosun)CMS .net版本 /user/City_ajax.aspx 文件 Cityid 参数SQL注入漏洞

No description provided by source...