13418 matches found
Wordpress EZLeadPro 插件-lp/index.php文件id参数-跨站脚本漏洞
No description provided by source...
Techbridge 视频会议系统 index.php 参数offsetminus SQL注入漏洞
exp: http://xxx/common/webmeeting/index.php?offsetminus=SELECT 6872 FROMSELECT COUNT,CONCAT0x7e7e7e,database,0x7e7e7e,FLOORRAND02x FROM INFORMATIONSCHEMA.CHARACTERSETS GROUP BY xa&day=26&min=10&year=2014...
PT-2016-5068
Name of the Vulnerable Software and Affected Versions Magento Enterprise Edition versions prior to 1.14.2.3 Magento Community Edition versions prior to 1.9.2.3 Description The issue allows remote attackers to obtain sensitive order information. This is achieved by exploiting the...
CVE-2016-2212: Exposure of Sensitive Information to an Unauthorized Actor
The getOrderByStatusUrlKey function in the MageRssHelperOrder class in app/code/core/Mage/Rss/Helper/Order.php in Magento Enterprise Edition before 1.14.2.3 and Magento Community Edition before 1.9.2.3 allows remote attackers to obtain sensitive order information via the orderid in a JSON object ...
Wordpress SI CAPTCHA AntiSpam 插件-test/index.php-跨站脚本漏洞
No description provided by source...
TaoCMS v2.5Beta4 index.php 存在sql注入漏洞
No description provided by source...
PT-2016-5031
Name of the Vulnerable Software and Affected Versions Moodle versions 2.6.11 and earlier, 2.7.x through 2.7.12, 2.8.x through 2.8.10, 2.9.x through 2.9.4, 3.0.x through 3.0.2 Description The issue allows remote authenticated users to discover student e-mail addresses by leveraging the teacher rol...
Techbridge 会议系统 index.php 参数gId[] POST注入漏洞
No description provided by source...
cmseasy 5.6 index.php 网站路径泄露漏洞
No description provided by source...
pigcms /index.php injection Vulnerability
0x01 漏洞简介 关键词：inurl:index.php?g=Home&m=Index&a=help intitle:营销系统 inurl:login 漏洞位置：index.php?m=Index&a=reg（注册页面） 0x02 漏洞利用 这里以http://.../index.php?m=Index&a=reg为例： 测试数据，截取数据包： POST /index.php?m=Users&a=checkreg HTTP/1.1 Host: ... Proxy-Connection: keep-alive Content-Length: 151 Cache-Control:...
NITC营销系统 index.php 参数language_id SQL注入
0x01漏洞简介 NITC营销系统在index.php对参数languageid过滤不严格，导致出现SQL注入漏洞。远程攻击者可以结合回显报错等方式执行SQL指令，获取敏感信息。 0x02漏洞证明 SQL注入漏洞位置： /index.php?languageid=1&isprotect=1&action=test languageid注入 0x03修复方案 过滤。...
tipask index.php $_FILES 注入tipask index.php $_FILES 注入漏洞漏洞
No description provided by source...
Fanwe团购系统 index.php 任意删除漏洞
No description provided by source...
网康 NS-ASG 应用安全网关 6.2 /3g/index.php SQL注入
No description provided by source...
Reflected Cross-Site Scripting Vulnerability in MetInfo Version 5.3.3
MetInfo is an enterprise website management system with PHP Mysql architecture. A reflective cross-site scripting vulnerability exists in MetInfo version 5.3.3. An attacker can exploit the vulnerability to conduct cross-site scripting attacks. The vulnerability exists in the following pages:...
vbmcms v7.0 index.php 参数userid SQL注入漏洞
No description provided by source...
trimmer.ru XSS vulnerability
Vulnerable URL: http://www.trimmer.ru/index.php?target=2 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 3764714 Google Pagerank| 2 VIP website status:| No Check trimmer.ru SSL...
ShopBuilder网上商城 ?m=vote&s=index&vid= (\module\vote\index.php文件)SQL注入漏洞
No description provided by source...
Pulse CMS 4.5.2 Local File Inclusion
Document Title: =============== Pulse CMS 4.5.2 - Local File Inclusion References Source: ==================== http://ehsansec.ir/advisories/plusecms452-lfi.txt Release Date: ============= 2016-02-28 Product & Service Introduction: =============================== Pulse CMS is the easiest way to...