Exploit for Use of Hard-coded Credentials in Jalios Jcms

CVE-2019-19033: Jalios JCMS 10 Backdoor Account / Authenticati...

Dahan jcms /jcms/jcms_files/jcms1/web1/site/module/comment/opr_ballot. jsp parameters c_uuid time blind

No description provided by source...

大汉JCMS /short_message/que_contact.jsp 等3处SQL注入

No description provided by source...

大汉JCMS /xxgk/workflow/design/que_model.jsp 多个参数SQL注入

No description provided by source...

大汉 (JCMS)的opr_getcount.jsp的两处注入（

No description provided by source...

大汉JCMS政务系统 opr_ballot.jsp 参数c_uuid SQL注入漏洞

No description provided by source...

jcms系统session重置导致getshell

简要描述： 详细说明： jcms系统session重置导致getshell 在/jcms/jcmsfiles/jcms1/web1/site/module/oss/quecode.jsp String sessionId = request.getParameter"sessionid"; 直接通过sessionid获取值 code1.setSessionNamesessionId; 然后又直接设置session 而在我们的jcms中的setup后台管理制作端中又只判断其中cookieusername是否为空 不为空即就登录 可参考如下：...

大汉 jcms m_5_7/replace/export.jsp 任意文件下载漏洞

No description provided by source...

jcms /interface/user/out_userinfo.jsp 文件 xmlinfo 参数敏感信息泄漏漏洞

No description provided by source...

JCMS在/jcms/interface/user/out_userinfo.jsp存在信息泄漏漏洞

No description provided by source...

JCMS政府信息公开系统在/lm/front/reg_2.jsp存在本地文件包含漏洞

No description provided by source...

JCMS政务系统在/lm/front/mailwrite_over.jsp页面存在任意文件遍历漏洞

No description provided by source...

JCMS政府信息公开系统在/lm/front/noontimelist.jsp存在SQL注入漏洞

No description provided by source...

大汉网络 JCMS que_style_coltop.jsp SQL注入漏洞

No description provided by source...

大汉网络JCMS module/voting/down.jsp任意文件下载

权限没设置好，导致可以枚举文件名下载文件 /jcms/m5e/module/voting/down.jsp?filename=username&pathfile=/etc/passwd pathfile就对着自己的linux输入就行了，这里测试了几个 /etc/shadow /etc/shadow...

大汉jcms /lm/sys/opr_uploadimg.jsp 文件上传漏洞

No description provided by source...

JCMS系统opr_classajax.jsp SQL注入漏洞

漏洞文件：/jcms/jcmsfiles/jcms1/web1/site/module/sitesearch/oprclassajax.jsp漏洞参数：?classid=11漏洞成因：对参数没有做过滤处理，直接导致注入产生漏洞分析:oprclassajax.jsp文件：%@page language="java" contentType="text/html; charset=UTF-8"% %@page import="com.hanweb.common.util.Convert"% %@page import="jcms.dbmanager.Manager"% %@page...

Hanweb JCMS /vipchat/home/front/search/opr_chatsearch.jsp SQL注入漏洞

No description provided by source...

Dahan version of JCMS2.4 LDAP module file upload vulnerability

Dahan Edition JCMS is a popular content management system in China. A file upload vulnerability exists in Dahan Editon JCMS 2.4 LDAP module, data recovery function. The file /ldap/update/update.jsp does not have any restriction on the uploaded file types and contents. Allows an attacker to exploi...

大汉网络某系统SQL注入漏洞

简要描述： SQL注入，遍历全部系统数据库。JCMS JIS 等。 详细说明： SQL注入: /vc/vc/interface/index/questylecoltop.jsp 代码分析： String strWebId = Convert.getParameterrequest, "webid".trim;//webid没有过滤 String strColumnId = Convert.getParameterrequest, "colid".trim; String strWebSiteUrl = ""; .... .... //获取栏目排行数据 if strMsg == null...