用友GRP-U8 系统登陆处参数UserNameText 存在SQL注入

No description provided by source...

用友 GRP u8 /IMLoginServlet?uid=1&pwd=1 sql注入

No description provided by source...

用友 GRP u8 /persionTreeServlet?bmdm=1 sql注入

No description provided by source...

用友 GRP-U8管理软件 /IMRoleServlet?pt=del&rolecode=1 sql注入

No description provided by source...

用友 GRP-u8 /UploadFile 任意文件上传

No description provided by source...

用友 GRP-U8财务管理软件 /UpdateNoticeRtnInfoInc?info_id=1&urid=2 sql注入

No description provided by source...

用友GRP-U8 财务管理软件userInfoWeb接口敏感信息泄露漏洞

No description provided by source...

用友GRP-U8 gzQuerydetail 参数KJND SQL注入漏洞

No description provided by source...

用友 GRP-U8教育财务管理软件 /R9iPortal/cm/cm_function_save.jsp sql注入

No description provided by source...

用友 GRP-U8管理软件 /IMUnitServlet?pt=add&org_code=1 sql注入

No description provided by source...

用友GRP-U8 政府财务管理系统 UpdateNoticeRtnInfoInc urid 参数SQL注入漏洞

No description provided by source...

用友GRP系统sql 注入漏洞

用友GRP系统sql注射 /R9iPortal/cm/cminfocontent.jsp 参数 infoid http://221.2.68.102:8888/R9iPortal/cm/cminfocontent.jsp?infoid=-8431%20UNION%20ALL%20SELECT%2067,67,user,67,67,67,67,67,67,67,67,67,67,67--...

用友GRP系统sql注射

简要描述： 用友GRP系统sql注射 详细说明： 用友GRP系统sql注射 链接：http://221.2.68.102:8888/R9iPortal/cm/cminfocontent.jsp?infoid=42 注射参数： Payload: infoid=-7911 UNION ALL SELECT 78,78,78,78,78,78,78,78,78,78,78,78, CHAR113+CHAR98+CHAR113+CHAR118+CHAR113+CHAR74+CHAR98+CHAR75+CHAR...

用友某重要系统任意文件上传漏洞之二

简要描述： 用友某重要系统任意文件上传漏洞之二 详细说明： 用友GRP-U8 财务管理软件 该servlet存在漏洞，可直接上传任意文件到服务器 None 这里为：http://210.44.112.101https://images.seebug.org/upload/chopper.jsp chopper 5个案例： http://210.44.112.101/UploadFile http://124.128.96.98:8001/UploadFile http://61.139.105.105:8008/UploadFile...

用友某重要系统两处高危SQL注射

简要描述： 用友某重要系统两处高危SQL注射 详细说明： 该系统为用友GRP-U8 财务管理软件，涉及到非常多敏感的信息 /IMLoginServlet?uid=1&pwd=1 /persionTreeServlet?bmdm=1 SQL注入1 /IMLoginServlet?uid=1&pwd=1 sqlmap.py -u "http://61.139.105.105:8008/IMLoginServlet?uid=1&pwd=1" SQL注入2 sqlmap.py -u "http://61.139.105.105:8008/persionTreeServlet?bmdm=1"...

CVE-2010-4989

SQL injection vulnerability in main.asp in Ziggurat Farsi CMS allows remote attackers to execute arbitrary SQL commands via the grp parameter...

CVE-2010-3139

Untrusted search path vulnerability in Microsoft Windows Progman Group Converter grpconv.exe allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse imm.dll that is located in the same folder as a .grp file...

Microsoft Group Convertor - imm.dll DLL Hijacking

Microsoft Group Convertor - imm.dll DLL Hijacking / Greetz to :b0nd, Fbih2s,r45c4l,Charles ,j4ckh4x0r, punter,eberly, Charles, Dinesh Arora Exploit Title: Microsoft Group Convertor DLL Hijacking imm.dll Date: 25/08/2010 Author: Beenu Arora Tested on: Windows XP SP3 Vulnerable extensions: grp...

Mircosoft Windows Program Group DLL Hijacking Exploit

Exploit for windows platform in category local exploits ===================================================== Mircosoft Windows Program Group DLL Hijacking Exploit ===================================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 ...

Sql injection

SQL injection vulnerability in the indianpulse Game Server comgameserver component 1.2 for Joomla! allows remote attackers to execute arbitrary SQL commands via the grp parameter in a gameserver action to index.php...