67 matches found
ecshop gbk there is a wide-character injection vulnerability-vulnerability warning-the black bar safety net
ecshop to the wide-character filtering or is not complete. The premise of the following parameters: http://www.xxx.com/user.php?act=isregistered&username=%ce%2 7%20and%2 0 1=1%20union%20select%2 0 1%20and%2 0%28select%2 0 1%20from%28select%20count%2 8%2 9,concat%2...
ecshop gbk存在宽字符注入
简要描述： 详细说明： ecshop 对宽字符过滤还是不完整。 漏洞证明：...
74CMS(Knight talent system)injection(into the background)-bug warning-the black bar safety net
Set of procedures filter is still relatively full, but all versions are GBK encoding is his flawed but basically the string into the library when the author used the iconv to convert the submitted over the data encoding into utf8 So the use of wide-character injection there is no way out but the...
74CMS talent system v3. 2 injection & full version pass rounded out the background-bug warning-the black bar safety net
Because a station with this system next to the station is also no start so went down the parts of the source code to read Set of procedures filter is still relatively full, but all versions are GBK encoding is his flawed but basically the string into the library when the author used the iconv to...
DedeCMS V5.7 SP1 UTF-8 GBK版本shopcar.class.php被植入后门
No description provided by source...
phpcms2008 & phpcms2007 GBK版ask/search_ajax.php SQL注射漏洞
PHPCMS 是国内领先的网站管理系统，同时也是一个开源的PHP开发框架 漏洞文件：ask/searchajax.php code： ?php require './include/common.inc.php'; requireonce MODROOT.'include/ask.class.php'; $ask = new ask; header'Content-type: text/html; charset=utf-8'; ifstrtolowerCHARSET != 'utf-8' $q = iconvCHARSET, 'utf-8', $q; if$q $where = "...
phpcms2008-0day & phpcms 2 0 0 7 GBK version 0day injection scan script-vulnerability warning-the black bar safety net
Affected program: phpcms2008 gbk Vulnerability file: ask/searchajax.php code: ? php require './ include/common.inc.php'; requireonce MODROOT.'include/ask.class.php'; $ask = new ask; header'Content-type: text/html; charset=utf-8'; ifvia strtolowerCHARSET != 'utf-8' $q = iconvCHARSET, 'utf-8', $q;...
On the PHP multi-character set encoding vulnerability research-exploit warning-the black bar safety net
| First, do an experiment,in the local environment in the establishment of such a php file ? php header"Content-Type:text/html;Charset=gb2312"; echo $GET"str"; echi "br/"; echo addslashes$GET"str"; ?& gt; Here my php environment has opened the Magicquotesgpc,contemporary code inside also made to...
Zend Framework "PDO_MySql"安全限制绕过漏洞
BUGTRAQ ID: 47919 Zend Framework ZF 是一个开放源代码的 PHP5 开发框架，可用于来开发 web 程序和服务。 Zend Framework在实现上存在"PDOMySql"安全限制绕过漏洞，远程攻击者可利用此漏洞绕过某些安全限制，利用SQL注入漏洞。 Zend Zend Framework 1.11.4 Zend Zend Framework 1.11.3 Zend Zend Framework 1.10.4 Zend Zend Framework 1.10.3 Zend Zend Framework 1.10.2 厂商补丁： Zend ----...
Ecshop补丁包被植入后门
简要描述： ECShop最新gbk官方补丁：ECShop272GBKpatch014.rar被植入后门与统计代码，初步观察后门涉及三个文件：admin\flowints.php、mobile\search.php、includes\fckeditor\editor\dialog\fckspellerpages\spellerpages\server-scripts\int.php...请补丁过的朋友及时修复 详细说明： 赤果果的后门啊！ 漏洞证明：...
phpmps 2.0 GBK Help.php $keywords SQL注入漏洞
php分类信息发布系统是一款免费开源的分类信息程序,适用于建立本地信息站点 Help.php 文件，取得keywords的值，只用trim函数，去除了首位空，直接带入sql查询 //取得文章列表 $keyword = !empty$REQUEST'keywords' ? trim$REQUEST'keywords' : ''; $typeid = !empty$REQUEST'typeid' ? intval$REQUEST'typeid' : 0; if!empty$keyword $arr = array; $keywords = 'AND '; $keywords .= "titl...
CVE-2010-1097
include/userlogin.class.php in DeDeCMS 5.5 GBK, when session.autostart is enabled, allows remote attackers to bypass authentication and gain administrative access via a value of 1 for the SESSIONdedeadminid parameter, as demonstrated by a request to uploads/include/dialog/selectsoftpost.php...
DeDeCMS 5.5 - _SESSION[dede_admin_id] Authentication Bypass
DeDeCMS 5.5 - SESSIONdedeadminid Authentication Bypass source: https://www.securityfocus.com/bid/38469/info DeDeCMS is prone to an authentication-bypass vulnerability because it fails to adequately verify user-supplied input. Attackers can exploit this issue to gain unauthorized access to the...
dedecms(plus/feedback_js.php)injection vulnerability-vulnerability warning-the black bar safety net
Found by:Rainy'Fox&St0p Team:two fat network securityhttp://bbs.erpangzi.com Affected version: dedecms GBK 5.1 Vulnerability description: 文件 :plus/feedbackjs.php ifempty$arcID $row = $dlist-dsql-GetOne"Select id From @cachefeedbackurl where url='$arcurl' "; ifisarray$row $urlindex = $row'id'; Get...
Empire CMS message Board vulnerability-vulnerability warning-the black bar safety net
Dark gray dropped out of the 0day. Find used Empire CMS station,the site behind a directly applied:e/tool/gbook/? bid=1 For example: www.xxx.com/e/tool/gbook/?bid=1 Out is Empire CMS the guestbook,in the name of writing:缞\ Contact email at: ,1,1,1,select concatusername,0x5f,password,0x5f,rnd from...
Ftbbs7. 1 static GBK version 0day-vulnerability warning-the black bar safety net
conn. asp wood has done anti-injected into the, ftbbsmyinfo. asp and JB to an injection,a perfect match.. Posted on ftbbsmyinfo. asp source code: ASP/Visual Basic code 0 1.& lt;% 0 2. postuserid=request. QueryString”postuserid” 0 3. ftbbsuser=request. QueryString”ftbbsuser” 0 4. call FTBBSHTMLMBf...
phpcms2008GBK double-byte encoding 0day-vulnerability warning-the black bar safety net
Author: magic springsB. S. N. Affected program: phpcms2008 gbk Vulnerability file: ask/searchajax.php Vulnerability rating: high Vulnerability description: /ask/searchajax.php PHP code 1. if$q 2. 3. $where = " title LIKE '%$q%' AND status = 5";//didn't do the filter directly infected with$where 4...
Discuz Spache.php注射漏洞
discuz的空间功能 space.php $member = $db-fetchfirst"SELECT m., mf., u.grouptitle, u.type, u.creditshigher, u.creditslower, u.readaccess, u.color AS groupcolor, u.stars AS groupstars, u.allownickname, u.allowuseblog, r.ranktitle, r.color AS rankcolor, r.stars AS rankstars $oltimeadd1 FROM...
Discuz! Forum the wap function module coding injection vulnerability-vulnerability warning-the black bar safety net
Author: The Frozen prodigal son Due to the hair in a blog on the vulnerability information to a bit beef up. Official has out patch. Since PHP for multibyte character sets support the existence of problem in various coding conversion process, it is possible to initiate a program overflow and...