File Inclusion Vulnerability in PHPSCUP

PHPSCUP is a set of pursuit of simplicity and ease of use of the system, the system is built-in business profile module, news module, product module, talent module, online message module and so on. PHPSCUP file contains a vulnerability that can be exploited by attackers to obtain server control...

Unauthorized access vulnerability in jianbook

jianbook is an ultra-clean online message system, the system is developed by asp + Access, the front-end backend in one. jianbook has an unauthorized access vulnerability that can be exploited by attackers to gain unauthorized access to sensitive information...

jianbook has a flawed logic vulnerability

jianbook is an ultra-clean online message system, the system is developed by asp + Access, the front-end backend in one. jianbook has a logic flaw vulnerability that can be exploited by attackers to bypass authentication and obtain administrator privileges...

SQL Injection Vulnerability in jianbook s****w.asp Page

jianbook is an ultra-clean online message system, the system is developed by asp + Access, the front-end backend in one. The jianbook sw.asp page has a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive information from the database...

SQL Injection Vulnerability in jianbook a***x.asp Page

jianbook is an ultra-clean online message system, the system is developed by asp + Access, the front-end backend in one. SQL injection vulnerability exists in the jianbook ax.asp page, which can be exploited by attackers to obtain sensitive information from the database...

Stored Cross-Site Scripting Vulnerability in PageAdmin CMS Online Message Feature

PageAdmin CMS is an enterprise building system based on PHP and mysql technology. A stored cross-site scripting vulnerability exists in the online message function of PageAdmin CMS. An attacker can insert malicious js code into the page to obtain user cookies and other information, resulting in...

XDCMS企业管理系统SQL注入#3

简要描述： 最新版XDCMS企业管理系统，由于过滤不严，可绕过限制，导致SQL注入 详细说明： 注入在XDCMS企业管理系统的在线留言功能处，来看看\system\modules\form\lists.php文件： public function addsave $formid=safehtml$GET'formid'; $formarr=base::loadcache"cacheform","form"; $form=getarray$formarr,'id',$formid,0; $fields=$POST'fields'; //获取留言的内容，这里没有过滤...

yourphp cms-stored xss-vulnerability warning-the black bar safety net

yourphp is based on thinkphp framework for the development of the open source cms, there is a storage-typexssvulnerability In the demo of the cms when found this vulnerability, in order to have the power of persuasion, then using the official demo displayxssprocess, In yourphp official...