OBlog (tags. asp) Remote SQL Injection Exploit-vulnerability warning-the black bar safety net

The official has been fixed the vulnerability. –==+=================== www.nspcn.org =================+==– –==+ OBlog tags. asp Remote SQL Injection Exploit +==– –==+====================================================================================+==– Author: Whytt & Tr4c3at1 2 6dotcom...

oblog文件下载漏洞

漏洞文件：attachment.asp,path参数过滤不严。导致可以下载任何文件。 !-- include file="inc/incsyssite.asp" -- % Dim Path,rs,FileID,ShowDownErr,uid,fileext Dim SQL Path = TrimRequest"path" FileID = TrimRequest"FileID" If FileID ="" And Path = "" Then Response.Write "参数不足" Response.End End If If CheckDownLoad Then If Path =...

Oblog AjaxServer.asp 变量ppass注入漏洞

Sub digglog //第691行 If Not lcaseRequest.ServerVariables"REQUESTMETHOD"="post" Then Response.End 。。。。。。 If request"ptrue"=1 Then //第703行 pdigg=oblog.checkuserlogineddiggunescapeTrimrequest"puser",Trimrequest"ppass" oblog.checkuserlogineddigg在/inc/ classsys.asp文件下： Public Function...

oblog4.6 user_diggs.asp SQL注入漏洞

漏洞出现在userdiggs.asp文件第304行左右，用Request获得topic的值，然后用oblog.InterceptStr处理后赋给topic。oblog.InterceptStr的作用只是截断字符而已，并没有过滤特殊字符。接着往下看，在第316行就直接把topic放到了SQL语句里进行了数据库操作，这样漏洞就形成了。4.6版的ACCESS和SQL 都存在这个问题，但是因为变量所在的SQL语句是update，所以我们并不能用union来联合暴出密码，唯一的方法就只有用“;”来执行多语句，而ACCESS并不支持多语句，因此漏洞只影响到SQL版本。 oblog 4.6...

Oblog blog system vulnerabilities and use(eat)-vulnerability warning-the black bar safety net

Vulnerabilities platform: the Oblog blog system Platform version: The through eat Vulnerability name: password retrieve Harm degree:★★★☆☆ Oblog blog system password retrieve function there is a serious design bug. Using this vulnerability, intruders can be through your own structure form changes...