EUVD-2009-4564

Malware in sbrugna...

大汉网络多个系统高危SQL注入（2个）

简要描述： 大汉网络多个系统高危SQL注入（2个） 详细说明： 经测试，发现jcms xxgk jis lm jbook jphoto jget jearch等系统存在高危SQL注入 漏洞文件为 /workflow/objectbox/selxgroupuserlist.jsp?groupid=1&changetype=1 /workflow/objectbox/selectxgroupuserlist.jsp?groupid=1&changetype=1 /workflow/objectbox/selectxgrouplist.jsp?groupid=1&changetype=1...

大汉jbook、jget、jvideo、source、jphoto和lm的通用越权漏洞

简要描述： jbook=订阅系统（好像是） source=数据源采集系统 jget=信息采集系统 jvideo=视频系统 jphoto=图片系统 lm=互动系统 大概就是这样。 详细说明： 某个同名文件虽然代码大同小异，但是都产生了同样的越权漏洞，可以重置这几个系统的安装目录相关配置信息。 漏洞证明： None 先用jphoto来做例子。 http://www.yzwh.gov.cn/jphoto/setup/ 这是jphoto的setup目录，先用exp提交数据： 提交成功后，提示配置文件修改完成，重启服务。 Exp里面是把密码设置为123456的...

CVE-2009-4598

SQL injection vulnerability in the JPhoto comjphoto component 1.0 for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a category action to index.php...

Sql injection

SQL injection vulnerability in the JPhoto comjphoto component 1.0 for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a category action to index.php...

CVE-2009-4598

SQL injection vulnerability in the JPhoto comjphoto component 1.0 for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a category action to index.php...

CVE-2009-4598

CVE-2009-4598 describes an SQL injection vulnerability in the JPhoto (com_jphoto) component for Joomla! version 1.0. The flaw allows remote attackers to execute arbitrary SQL commands through the id parameter in a category action to index.php. Documents indicate the vulnerability affects the JPho...

CVE-2009-4598: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the JPhoto comjphoto component 1.0 for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a category action to index.php...

Joomla JPhoto SQL Injection

Joomla Component comjphoto SQL injection vulnerability - id Author : kaMtiEz [email protected] Homepage : http://www.indonesiancoder.com Date : december 9, 2009 Software Information + Vendor : http://www.corephp.com/ + Download :...