Apabi图书系统多个参数MSSQL注入漏洞

简要描述： 详细说明： 厂商： http://gw.apabi.com/ 北京方正阿帕比技术有限公司 SQL注入点： /netlinkhandler.asp?lang=gb&DocGroupID=&FieldID=&FieldName=Creator&FieldType=1&QueryValue=&Repeatable=True 其中：DocGroupID、FieldID这2个参数都是存在SQL注入的 互联网自动采集案例5枚：...

某数字资源平台系统mssql注入

简要描述： mssql注入 详细说明： 厂商： http://gw.apabi.com/ 北京方正阿帕比技术有限公司 SQL注入点： /tree/deeptree.asp?DocGroupID=2&hide=1&CategoryTypeID=1 其中DocGroupI存在注入 报错： Microsoft OLE DB Provider for SQL Server 错误 '80040e14' ' where a.CategoryID ' or a.CategoryTypeID in select CategoryTypeID from DocGroup where DocGroupID=...

某学校综合管理系统通用SQL注入漏洞

简要描述： 某学校综合管理系统通用SQL注入漏洞 详细说明： 系统名称：学校综合管理平台 厂商：上海安脉计算机科技有限公司 关键字：版权所有：上海安脉计算机科技有限公司 系统架构：ASPX+MSSQL 漏洞文件：OA/usecar/carStat.aspx 注入参数：startdate 枚举部分案例： http://anmai.net:81/OA/usecar/carStat.aspx http://jwxx.am.jsedu.sh.cn/ANMAI/OA/usecar/carStat.aspx http://bssyxxgl.eicbs.com/OA/usecar/carStat.as...

某学生综合管理系统通用SQL注入漏洞

简要描述： 某学生综合管理系统通用SQL注入漏洞 详细说明： 系统名称：学校综合管理平台 厂商：上海安脉计算机科技有限公司 关键字：版权所有：上海安脉计算机科技有限公司 系统架构：ASPX+MSSQL 漏洞文件：STManage/SystemManage/MaterialSetting.aspx 注入参数：hidmaterid 枚举部分案例： http://anmai.net:81/ http://jwxx.am.jsedu.sh.cn/ANMAI/ http://bssyxxgl.eicbs.com/ http://cjzx.am.jsedu.sh.cn/...

某学校综合管理系统通用SQL注入漏洞影响众多学校

简要描述： 某学校综合管理系统通用SQL注入漏洞影响众多学校 详细说明： 系统名称：学校综合管理平台 厂商：上海安脉计算机科技有限公司 关键字：版权所有：上海安脉计算机科技有限公司 系统架构：ASPX+MSSQL 漏洞文件：OA/repair/staticStat.aspx 注入参数：seldep 枚举部分案例： http://anmai.net:81/OA/repair/staticStat.aspx http://jwxx.am.jsedu.sh.cn/ANMAI/OA/repair/staticStat.aspx...

某用户量较大的综合管理系统mssql注射漏洞

简要描述： 大量学生综合系统使用安脉的。 详细说明： 厂商： 上海安脉计算机科技有限公司 http://www.anmai.net/ SQL注射点： /oa/news/updateAffiche.aspx?id=1 其中id参数存在sql注射 互联网自动采集案例5枚： http://zhgl.w25z.cn/ANMAI/oa/news/updateAffiche.aspx?id=1 http://www.jukui.com/ANMAI/oa/news/updateAffiche.aspx?id=1...

SysAid Server Arbitrary File Disclosure

Vantage Point Security Advisory 2014-004 ======================================== Title: SysAid Server Arbitrary File Disclosure ID: VP-2014-004 Vendor: SysAid Affected Product: SysAid On-Premise Affected Versions: Summary: --- SysAid Server is vulnerable to an unauthenticated file disclosure...

SysAid Server Arbitrary File Disclosure Vulnerability

SysAid Server is vulnerable to an unauthenticated file disclosure attack that allows an anonymous attacker to read arbitrary files on the system. An attacker exploiting this issue can compromise SysAid user accounts and gain access to important system files. When SysAid is configured to use LDAP...

SysAid Server - Arbitrary File Disclosure

Vantage Point Security Advisory 2014-004 ======================================== Title: SysAid Server Arbitrary File Disclosure ID: VP-2014-004 Vendor: SysAid Affected Product: SysAid On-Premise Affected Versions: Summary: --- SysAid Server is vulnerable to an unauthenticated file disclosure...

Amazon Linux AMI : php-ZendFramework (ALAS-2014-460)

The 1 ZendLdap class in Zend before 1.12.9 and 2 Zend\Ldap component in Zend 2.x before 2.2.8 and 2.3.x before 2.3.3 allows remote attackers to bypass authentication via a password starting with a null byte, which triggers an unauthenticated bind. CVE-2014-8088 The 1.12.9, 2.2.8, and 2.3.3 releas...

Microsoft SQL Server SUSER_SNAME Windows Domain Account Enumeration

This module can be used to bruteforce RIDs associated with the domain of the SQL Server using the SUSERSNAME function. This is similar to the smblookupsid module, but executed through SQL Server queries as any user with the PUBLIC role everyone. Information that can be enumerated includes Windows...

Microsoft SQL Server Escalate EXECUTE AS

This module can be used escalate privileges if the IMPERSONATION privilege has been assigned to the user. In most cases, this results in additional data access, but in some cases it can be used to gain sysadmin privileges. This module requires Metasploit: https://metasploit.com/download Current...

Infosea GLIS V7.0&V9.0 Sql Injection

简要描述： 清大新洋图书管理系统V7.0和V9.0版存在注入漏洞 详细说明： 写了那么多洞儿也没来一个大厂商呢。好伤心呀！我就不像某些人一样一个系统十个注入点分开刷了来一个首页可好啊？ v9.0的是oracle数据库、v7.0的似mssql数据库 官网案例：http://www.infosea.com.cn/yonghu.html（有点吓人） GLIS V7.0默认风格： GLIS V9.0默认风格： 两处SQL注入： 第一处：/opac/ckgc.jsp?kzh= GLIS V9.0版本 第二处：/opac/fljs/fllist.jsp?flh= GLIS V7.0版本 漏洞证明：...

Retrieving all tables and their columns at once MSSQL

In the Name of ALLAH the Most Beneficent and the Merciful Zenodermus, Ch3rn0by1 and Me was workinn on MSSQL.. when Zenodermus thought to make a DIOS for MSSQL.. previously at Код: http://websec.ca/kb/sqlinjection DIOS is under the heading Retrieving Multiple Tables and Columns Код: AND 1=0; BEGIN...

Crescendo - Sales CRM Authentication Bypass Vulnerability

Exploit for asp platform in category web applications Crescendo - Sales CRM Authentication Bypass Vulnerability Exploit Title: Crescendo - Sales CRM Authentication Bypass Vulnerability Sql Injection Google Dork: N/A Date: July 15 , 2014 Exploit Author: Monendra Sahu email protected Vendor Homepag...

Crescendo - Sales CRM SQL Injection

Crescendo - Sales CRM Authentication Bypass Vulnerability Exploit Title: Crescendo - Sales CRM Authentication Bypass Vulnerability Sql Injection Google Dork: N/A Date: July 15 , 2014 Exploit Author: Monendra Sahu [email protected] Vendor Homepage: http://dejavuprotech.com/crecendo.php Test...

Medium: php54

Issue Overview: acinclude.m4, as used in the configure script in PHP 5.5.13 and earlier, allows local users to overwrite arbitrary files via a symlink attack on the /tmp/phpglibccheck file. A denial of service flaw was found in the way the File Information fileinfo extension parsed certain...

MSSQL 7.0 - Remote Denial of Service Exploit

No description provided by source...

BPHolidayLettings 1.0 - Blind SQL Injection

No description provided by source. x========================================================================================================================================x | AntiSecuritydotorg |...

LimeSurvey 2.00+ (build 131107) - Multiple Vulnerabilities

No description provided by source. ? LimeSurvey v2.00+ build 131107 Script Insertion And SQL Injection Vulnerability Vendor: LimeSurvey Project Team Product web page: http://www.limesurvey.org Affected version: 2.00+ build 131009 2.00+ build 131022 2.00+ build 131031 2.00+ build 131107 Summary:...