Oblog 4.5-4.6 access&mssql getshell 0day-vulnerability warning-the black bar safety net

Impact range: 4.5 - 4.6 Vulnerability requirements: IIS6. 0\Open Membership Mining author:henry Absolute originality, technical content is not high,but the impact of the relatively wide range of.. Vulnerability file: AjaxServer. asp 3 of 7 2 rows logfilename = TrimRequest"filename"//not filter...

Oblog多用户博客程序Api/API_Response.asp页面过滤不严导致SQL注入漏洞

OBlog是国内多用户博客使用度最多最广的多用户博客解决方案。 漏洞文件:api/APIResponse.asp 打开api/APIResponse.asp看开头处=================省略部分代码============================ if request.querystring"syskey""" then syskey=lcaserequest.querystring"syskey" username=oblog.filtbadstrtrimrequest"username" if chksyskey then dim truepassword...