浪潮某政府系统通用SQL注入24处打包

简要描述： ... 详细说明： 某政府系统通用SQL注入24处打包。 案例：（23处GET注入+1处POST注入） 23处GET注入： http://www.whaac.gov.cn:8080/BusinessRegistration/BRProjectList.aspx?page=1&procode= http://www.cfdonline.org.cn/OutPortalCFD//BusinessRegistration/BRProjectList.aspx?page=1&procode=...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in the Infra Admin UI in Cisco Identity Services Engine ISE 1.21.198 and 1.30.876 allow remote attackers to inject arbitrary web script or HTML via unspecified parameters in a 1 GET or 2 POST request, aka Bug ID CSCus16052...

CVE-2015-4268

Multiple cross-site scripting XSS vulnerabilities in the Infra Admin UI in Cisco Identity Services Engine ISE 1.21.198 and 1.30.876 allow remote attackers to inject arbitrary web script or HTML via unspecified parameters in a 1 GET or 2 POST request, aka Bug ID CSCus16052...

CVE-2015-4268: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in the Infra Admin UI in Cisco Identity Services Engine ISE 1.21.198 and 1.30.876 allow remote attackers to inject arbitrary web script or HTML via unspecified parameters in a 1 GET or 2 POST request, aka Bug ID CSCus16052...

Cisco IP Communicator Denial of Service Vulnerability

Cisco IP Communicator is a suite of Windows PC-based softphone applications from Cisco. The program supports access to company phones, voicemail, etc. via a USB headset or USB speakerphone. A security vulnerability exists in Cisco IP Communicator version 8.64. A remote attacker could exploit this...

D-Link DNS Devices Authentication Bypass Vulnerability

Authentication bypass vulnerability in D-Link DNS devices. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPEPREFIX = "cpe:/o:dlink";...

PT-2015-6477

Name of the Vulnerable Software and Affected Versions Cisco IP Communicator version 8.64 Description The issue allows remote attackers to cause a denial of service, resulting in a service outage. This can be achieved by sending a GET request to an unspecified URL. Recommendations For Cisco IP...

CVE-2015-4240: Undefined Security Weakness

Cisco IP Communicator 8.64 allows remote attackers to cause a denial of service service outage via an unspecified URL in a GET request, aka Bug ID CSCuu37656...

CVE-2015-4218

The web-based user interface in Cisco Jabber through 9.63 and 9.7 through 9.75 on Windows allows remote attackers to obtain sensitive information via a crafted value in a GET request, aka Bug IDs CSCuu65622 and CSCuu70858...

Design/Logic Flaw

The web-based user interface in Cisco Jabber through 9.63 and 9.7 through 9.75 on Windows allows remote attackers to obtain sensitive information via a crafted value in a GET request, aka Bug IDs CSCuu65622 and CSCuu70858...

CVE-2015-4218

The web-based user interface in Cisco Jabber through 9.63 and 9.7 through 9.75 on Windows allows remote attackers to obtain sensitive information via a crafted value in a GET request, aka Bug IDs CSCuu65622 and CSCuu70858...

PT-2015-6466

Name of the Vulnerable Software and Affected Versions Cisco Jabber versions 9.63 and earlier, 9.7 through 9.75 Description The issue allows remote attackers to obtain sensitive information via a crafted value in a GET request to the web-based user interface. Recommendations For versions 9.63 and...

CVE-2015-4218: Exposure of Sensitive Information to an Unauthorized Actor

The web-based user interface in Cisco Jabber through 9.63 and 9.7 through 9.75 on Windows allows remote attackers to obtain sensitive information via a crafted value in a GET request, aka Bug IDs CSCuu65622 and CSCuu70858...

Marktplaats: Content Spoofing - http://aanbieding.marktplaats.nl/wp-admin/admin-ajax.php

Hello, Content spoofing, also referred to as content injection or virtual defacement, is an attack targeting a user made possible by injection vulnerability in a web application. When an application does not properly handle user supplied data, an attacker can supply content to a web application,...

Offiria Open Source Enterprise Social Network Remote Detection

Detects the installed version of Offiria Open Source Enterprise Social Network. This script sends an HTTP GET request and tries to confirm the application from the response. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are...

CVE-2015-3950

Cross-site request forgery CSRF vulnerability in XZERES 442SR OS on 442SR wind turbines allows remote attackers to hijack the authentication of admins for requests that select a different default admin user via a GET request...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in XZERES 442SR OS on 442SR wind turbines allows remote attackers to hijack the authentication of admins for requests that select a different default admin user via a GET request...

CVE-2015-3950

CVE-2015-3950 is a CSRF vulnerability in XZERES 442SR OS (Wind Turbine 442SR) that allows a remote attacker to hijack the admin’s session by using a crafted GET request to switch the default admin user. Affected component: the 442SR OS web interface; root cause reported as CSRF via GET leading to...

CVE-2015-3950

Cross-site request forgery CSRF vulnerability in XZERES 442SR OS on 442SR wind turbines allows remote attackers to hijack the authentication of admins for requests that select a different default admin user via a GET request...

PT-2015-6355

Name of the Vulnerable Software and Affected Versions XZERES 442SR OS version not specified Description A cross-site request forgery issue allows remote attackers to hijack admin authentication for requests, specifically those that change the default admin user, via a GET request to a vulnerable...