OBLOG - err.asp Cross-Site Scripting

OBLOG - err.asp Cross-Site Scripting source: https://www.securityfocus.com/bid/33416/info OBLOG is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the browser of an...

OBLOG - 'err.asp' Cross-Site Scripting

source: https://www.securityfocus.com/bid/33416/info OBLOG is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of t...

Oblog some finishing-vulnerability warning-the black bar safety net

1, Display, help/hmain. htm content, format: http://test/blog/userhelp.asp?file=help/hwhatblog.htm if replaced with asp files not be displayed? From the code can be seen, not allowed to read the extension of the asp file, but the extension is not limited, we only want the asp file content, window...

Oblog多用户博客程序Api/API_Response.asp页面过滤不严导致SQL注入漏洞

OBlog是国内多用户博客使用度最多最广的多用户博客解决方案。 漏洞文件:api/APIResponse.asp 打开api/APIResponse.asp看开头处=================省略部分代码============================ if request.querystring"syskey""" then syskey=lcaserequest.querystring"syskey" username=oblog.filtbadstrtrimrequest"username" if chksyskey then dim truepassword...

Oblog多用户博客程序AjaxServer.asp页面过滤不严导致SQL注入漏洞

通过构造特定的语句，可以更改任何用户的密码，包括管理员，严重级漏洞。 漏洞文件：AjaxServer.asp 变量：logfiles 语句：logfiles=Replacelogfiles," ","" If Leftlogfiles,1="," Then logfiles=Rightlogfiles,Lenlogfiles-1 rs"logpics" = logfiles '附加文件处理 If logfiles "" Then oblog.Execute "Update oblogupfile Set logid=" & tid & " Where fileid In " &...

Oblog 4.6多用户博客程序AjaxServer.asp页面过滤不严导致SQL注入漏洞

漏洞文件AjaxServer.asp: Sub digglog //第691行If Not lcaseRequest.ServerVariables"REQUESTMETHOD"="post" Then Response.End 。。。。。。 If request"ptrue"=1 Then //第703行 pdigg=oblog.checkuserlogineddiggunescapeTrimrequest"puser",Trimrequest"ppass" oblog.checkuserlogineddigg在/inc/ classsys.asp文件下： Public Functio...

Oblog 4.6 User_Address.asp注入漏洞

漏洞文件UserAddress.asp： If oblog.lGroup17,0=0 Then //第4行 有等级限制 oblog.AddErrStr "您目前所属的等级不允许使用通讯录功能" oblog.showUserErr Response.End End if 。。。。。。 addrId=Request"id" //第15行 If addrId"" And InStraddrid,","=0 Then addrId=IntaddrId 。。。。。。 Case "add","edit" //第23行 Call EditForm 。。。。。。 Sub EditForm //第90行 ...

OBLOG Class_UserCommand.asp注入漏洞

文件In/ClassUserCommand.asp : strMonth=Request"month" //第63行 strDay=Request"day" …… Case "month" //第84行 Dim LastDay GPFileName = GPFileName & "month&month=" & strMonth strDay=LeftstrMonth,4 & "-" & RightstrMonth,2 & "-01" mYear=LeftstrMonth,4 mMonth=RightstrMonth,2 If InStr...

Oblog latest injection vulnerabilities analysis(already patched)-vulnerability warning-the black bar safety net

Date: 2008-5-15 Author: YamatoBCT Version: for Oblog 4.5-4.6 sql Code analysis: File In/ClassUserCommand. asp : strMonth=Request"month" //6th line 3 strDay=Request"day" ...... Case "month" //the first 8 line 4 Dim LastDay GPFileName = GPFileName & "month&month=" & strMonth strDay=LeftstrMonth,4 &...

A word to make OBLOG user password obediently sent on-vulnerability warning-the black bar safety net

As network technology gradually developed, more and more enterprises have their own website platform, through this platform, external publicity yourself, and the content so employees can better communicate technical issues and working arrangements. OBLOG as a multi-user blog publishing system in ...

OBlog (tags.asp) Remote SQL Injection Exploit

No description provided by source...

Oblog vulnerability reproduce,didn't fill good! - Vulnerability warning-the black bar safety net

Program download: http://down.oblog.cn/oblog4/oblog46Final20080403.rar Description: April Fool's Day engraving the brand in a blog published on a Oblog arbitrary File Download vulnerability. 文章 见 http://www.tr4c3.com/post/302.html 0dayApril Fool's Day gift oblog File Download vulnerability...

Really Supplement? Oblog vulnerability reproduce-bug warning-the black bar safety net

Author: Tr4c3 Was this a gift just to give BK an instant group of friends to share, specifically say not to let get to engage in official, unfortunately or someone first to get the official test, let people is depressed, the T the people, block it. Today released to everyone. Tr4c3at1 2 6dotcom...

OBlog任意文件下载漏洞

attachment.asp代码 Path = TrimRequest"path" '获取用户提交的路径 FileID = TrimRequest"FileID" If FileID ="" And Path = "" Then Response.Write "参数不足" Response.End End If ... If CheckDownLoad Or 1= 1Then If Path = "" Then set rs = Server.CreateObject"ADODB.RecordSet" linkdatabase SQL = "select...

OBlog Sql Injection Vulnerability

漏洞文件tags.asp 变量tagid未经过滤传值，带入sql执行，导致注入产生。 3.13-20060429 access & mssql 4.02-20070112 access & mssql 4.50 Final Build0619 access & mssql 4.60 Final Build0921 access & mssql 4.60 Final Build1107 access & mssql 修补方法:检查用户提交的tagid，只允许是数字。 例如： 将iTagId = TrimRequest.Querystring”tagid”改成iTagId =...

OBlog (tags. asp) Remote SQL Injection Exploit-vulnerability warning-the black bar safety net

The official has been fixed the vulnerability. –==+=================== www.nspcn.org =================+==– –==+ OBlog tags. asp Remote SQL Injection Exploit +==– –==+====================================================================================+==– Author: Whytt & Tr4c3at1 2 6dotcom...

oblog文件下载漏洞

漏洞文件：attachment.asp,path参数过滤不严。导致可以下载任何文件。 !-- include file="inc/incsyssite.asp" -- % Dim Path,rs,FileID,ShowDownErr,uid,fileext Dim SQL Path = TrimRequest"path" FileID = TrimRequest"FileID" If FileID ="" And Path = "" Then Response.Write "参数不足" Response.End End If If CheckDownLoad Then If Path =...

Oblog AjaxServer.asp 变量ppass注入漏洞

Sub digglog //第691行 If Not lcaseRequest.ServerVariables"REQUESTMETHOD"="post" Then Response.End 。。。。。。 If request"ptrue"=1 Then //第703行 pdigg=oblog.checkuserlogineddiggunescapeTrimrequest"puser",Trimrequest"ppass" oblog.checkuserlogineddigg在/inc/ classsys.asp文件下： Public Function...

oblog4.6 user_diggs.asp SQL注入漏洞

漏洞出现在userdiggs.asp文件第304行左右，用Request获得topic的值，然后用oblog.InterceptStr处理后赋给topic。oblog.InterceptStr的作用只是截断字符而已，并没有过滤特殊字符。接着往下看，在第316行就直接把topic放到了SQL语句里进行了数据库操作，这样漏洞就形成了。4.6版的ACCESS和SQL 都存在这个问题，但是因为变量所在的SQL语句是update，所以我们并不能用union来联合暴出密码，唯一的方法就只有用“;”来执行多语句，而ACCESS并不支持多语句，因此漏洞只影响到SQL版本。 oblog 4.6...

Oblog blog system vulnerabilities and use(eat)-vulnerability warning-the black bar safety net

Vulnerabilities platform: the Oblog blog system Platform version: The through eat Vulnerability name: password retrieve Harm degree:★★★☆☆ Oblog blog system password retrieve function there is a serious design bug. Using this vulnerability, intruders can be through your own structure form changes...