大汉版通JIS统一身份认证系统SQL注射漏洞

简要描述： 我也拿大汉版通刷点WB吧。 大汉版通JIS统一身份认证系统存在SQL注射漏洞，可获取用户帐号密码等。 详细说明： 大汉版通JIS统一身份认证系统webservice的多个方法存在SQL注射漏洞，系统webservice路径/jis/service： 例如validateLogin方法： 例如getAppURLById方法： 漏洞证明： 用getGroupEntity操作测试： ?php / jis web service getGroupEntity metho...

大汉版通JIS统一身份认证系统某处任意文件下载漏洞及一个小越权漏洞

简要描述： 上班了上班了。 详细说明： 某处存在一个问题，可以遍历所有的用户名，同时包含组织结构！领导名字都泄漏了啊 http://www.gansu.gov.cn/jis/objectbox/selx.jsp?tabid=1&limit=1&fid=userid&fname=vcusername&date= http://ln-n-tax.gov.cn/jis/objectbox/selx.jsp?tabid=1&limit=1&fid=userid&fname=vcusername&date= 漏洞证明： 另外一处还存在一个任意文件下载的问题！...

JIS /JIS/down.jsp 任意文件下载漏洞

No description provided by source...

大汉版通JIS统一身份认证系统源码某处的信息泄漏可能影响大部分JIS

简要描述： 有点奇葩但是已经遇到过两次的漏洞。不过不要因为我分类选了“信息泄漏”就觉得这个只是小漏洞……其实这货可能影响大了呢！而且里面的利用可以结合之前我提交的JIS的漏洞综合来利用，还是有点意思的 详细说明： 2.2.1版本的JIS中某个文件包含了JIS相关邮件找回密码的邮箱信息！包含邮箱用户名和邮箱密码！也就是说，有一部分版本的JIS，找回用户密码的功能所发出的邮件，都是利用该邮箱发出的！到底有什么危害？下面继续看 漏洞证明： jis\check\findpwd\oprvalidate.jsp String sender =new...

大汉版通JIS统一身份认证系统后台文件上传漏洞及两处越权漏洞

简要描述： 先祝大家马年吉祥！ 说会到JIS，原本以为后台是限制得很死的，无法上传jsp，但是研究了下发现不是这样的……另外还有两处越权，打包发了。 详细说明： 后台文件上传，顾名思义还是需要有管理员的账户，或者确切的说，是需要有“有新建应用权限的账户”。这里用管理员权限来说明。 先看应用管理——新建 直接看oprapplication.jsp文件： ifstrFileName.toLowerCase.endsWith"gif" || strFileName.toLowerCase.endsWith"jpg"//cmd.jsp00gif轻松过if file = new File...

大汉版通身份认证JIS系统任意文件下载漏洞

简要描述： 大汉版通用登录JIS系统任意文件下载漏洞 详细说明： 界面： jis任意文件下载。至少WIN下一般都可以通杀，个别版本加了权限验证需要登录，但是我觉得只要登录后的身份合适，在win下都通杀的。 漏洞证明： ifstrFilePath.indexOf"WEB-INF"!=-1 LogWriter.debug"下载文件不存在!"; out.println"alert'file not exist!';history.back;"; return; //判断文件是否存在 File file = new FilestrFilePath; if !file.exists ||...

Cross site scripting

Cross-site scripting XSS vulnerability in Microsoft Internet Explorer 6 through 10 allows remote attackers to inject arbitrary web script or HTML via vectors involving incorrect auto-selection of the Shift JIS encoding, leading to cross-domain scrolling events, aka "Shift JIS Character Encoding...

CVE-2013-3166

CVE-2013-3166 is an XSS vulnerability in Microsoft Internet Explorer (IE6–IE10) that arises from incorrect auto‑selection of the Shift JIS encoding, enabling remote script/HTML execution via cross‑domain scrolling events. The issue is documented as the Shift JIS Character Encoding Vulnerability a...

CVE-2013-3166

Cross-site scripting XSS vulnerability in Microsoft Internet Explorer 6 through 10 allows remote attackers to inject arbitrary web script or HTML via vectors involving incorrect auto-selection of the Shift JIS encoding, leading to cross-domain scrolling events, aka "Shift JIS Character Encoding...

Microsoft Internet Explorer Shift JIS Encoded Characters Cross-Site Scripting Vulnerability

Description Microsoft Internet Explorer is prone to a cross-site scripting vulnerability. An attacker can exploit this issue to gain access to information in another domain or Internet Explorer zone. This may allow the attacker to obtain sensitive information that may aid in further attacks...

Microsoft Internet Explorer Shift JIS字符信息泄露漏洞(CVE-2013-0015) (ms13-009)

BUGTRAQ ID: 57822 CVECAN ID: CVE-2013-0015 Microsoft Internet Explorer是微软公司推出的一款网页浏览器。 Shift JIS是日本语的字符编码。Internet Explorer 6, 7, 8, 9没有正确执行Shift JIS编码的自动选择，通过构造触发跨域滚动事件的特制网站，远程攻击者可从不同的域或区域读取内容，造成信息泄露。 0 Microsoft Internet Explorer 6 - 9 临时解决方法： 如果您不能立刻安装补丁或者升级，建议您采取以下措施以降低威胁： 将互联网和局域网安全区域设置为“高”...

CVE-2013-0015

Microsoft Internet Explorer 6 through 9 does not properly perform auto-selection of the Shift JIS encoding, which allows remote attackers to read content from a different 1 domain or 2 zone via a crafted web site that triggers cross-domain scrolling events, aka "Shift JIS Character Encoding...

CVE-2013-0015

Microsoft Internet Explorer 6 through 9 does not properly perform auto-selection of the Shift JIS encoding, which allows remote attackers to read content from a different 1 domain or 2 zone via a crafted web site that triggers cross-domain scrolling events, aka "Shift JIS Character Encoding...

Cross site scripting

Microsoft Internet Explorer 6 through 9 does not properly perform auto-selection of the Shift JIS encoding, which allows remote attackers to read content from a different 1 domain or 2 zone via a crafted web site that triggers cross-domain scrolling events, aka "Shift JIS Character Encoding...

CVE-2013-0015

Microsoft Internet Explorer 6 through 9 does not properly perform auto-selection of the Shift JIS encoding, which allows remote attackers to read content from a different 1 domain or 2 zone via a crafted web site that triggers cross-domain scrolling events, aka "Shift JIS Character Encoding...

CVE-2013-0015

Microsoft Internet Explorer 6–9 suffer from a vulnerability in automatic Shift JIS encoding selection, enabling remote attackers to read content from a different domain/zone via a crafted site that triggers cross-domain scrolling events (Shift JIS Character Encoding Vulnerability). This issue cau...

Microsoft Patches Critical IE Vulnerabilities

Internet Explorer continues to dominate Microsoft’s 2013 security updates. Among the 12 bulletins and 57 vulnerabilities patched in today’s release was a cumulative update for the maligned browser and another fix for a bug being exploited in the wild. Last month, an out-of-band fix for IE 6-8...

Internet Explorer Shift JIS Character Encoding (MS13-009; CVE-2013-0015)

A remote code execution vulnerability has been reported in Microsoft Internet Explorer...

Ubuntu Update for thunderbird USN-1254-1

Ubuntu Update for Linux kernel vulnerabilities USN-1254-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN12541.nasl 7964 2017-12-01 07:32:11Z santu $ Ubuntu Update for thunderbird USN-1254-1 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net...

USN-1254-1: Thunderbird vulnerabilities

It was discovered that CVE-2011-3004, which addressed possible privilege escalation in addons, also affected Thunderbird 3.1. An attacker could potentially exploit a user who had installed an add-on that used loadSubscript in vulnerable ways. CVE-2011-3647 Yosuke Hasegawa discovered that the...