phpwind 2.0.1 hidden.php 代码执行漏洞

No description provided by source...

PHPWind hidden.php脚本代码注入漏洞

PHPWind实现上存在输入验证漏洞，远程攻击者可能利用此漏洞在主机上以Web进程权限执行任意命令。 PHPWind的job.php及hidden.php脚本对用户提交的参数值未做充分的过滤检查，远程攻击者可以注入PHP脚本代码到文件中，攻击者以Web进程权限执行任意命令。 PHPWind 2.0.1 PHPWind ------- 目前厂商已经在最新版本的软件中修复了这个安全问题，请到厂商的主页下载： http://www.phpwind.net/...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Netjuke 1.0-rc2 allow remote attackers to inject arbitrary web script or HTML via 1 the val parameter to alphabet.php in an alpha.albums action, or the PATHINFO to 2 random.php or 3 admin/hidden.php...

CVE-2007-4811

Multiple cross-site scripting XSS vulnerabilities in Netjuke 1.0-rc2 allow remote attackers to inject arbitrary web script or HTML via 1 the val parameter to alphabet.php in an alpha.albums action, or the PATHINFO to 2 random.php or 3 admin/hidden.php...

CVE-2007-4811

CVE-2007-4811 concerns multiple cross-site scripting (XSS) vulnerabilities in Netjuke 1.0-rc2. The affected entry indicates that remote attackers can inject arbitrary web script or HTML via (1) the val parameter to alphabet.php in an alpha.albums action, or (2) the PATH_INFO to random.php, or (3)...

CVE-2007-4811

Multiple cross-site scripting XSS vulnerabilities in Netjuke 1.0-rc2 allow remote attackers to inject arbitrary web script or HTML via 1 the val parameter to alphabet.php in an alpha.albums action, or the PATHINFO to 2 random.php or 3 admin/hidden.php...