Security Bypass Via Unauthorised Overriding Security Groups

tile-generator is vulnerable to security bypass via unauthorized overriding of security groups. The vulnerability exists because applyopensecuritygroup is set to true which allows the overriding of security groups set by the operator...

wongminbin CMS Directory Traversal Vulnerability

wongminbin CMS is a set of maven-based springmvc spring + mybatis development of content management system . A directory traversal vulnerability exists in wongminbin CMS, which can be exploited to read arbitrary files in an overriding application context by sending a request with the directory...

PHP has an unspecified vulnerability (CNVD-2016-02887)

PHP is an open source general-purpose computer scripting language maintained by the PHP Group and the open source community. PHP allows overriding of 'one definition' values, and no detailed vulnerability details are currently provided...

Destoon最新全版本通杀SQL注入漏洞

简要描述： Destoon最新全版本通杀注入漏洞 详细说明： /common.inc.php 64行： ------------------------------------------------------------------------------------- if$POST $POST = stripsql$POST; //stripsql过滤 if$GET $GET = stripsql$GET; if$COOKIE $COOKIE = stripsql$COOKIE; ......... if$POST extract$POST, EXTRSKIP; //注册变量...

CVE-2011-1402

Mahara before 1.3.6 allows remote authenticated users to bypass intended access restrictions, and suspend a user account, edit a view, visit a view, edit a plan artefact, read a plans block, read a plan artefact, edit a blog, read a blog block, read a blog artefact, or access a block, via a reque...

Technical note by Amit Klein: "Sending arbitrary HTTP requests with Flash 7/8 (+IE 6.0)"

Sending arbitrary HTTP requests with Flash 7/8 +IE 6.0 Amit Klein, August 2006 The trick ========= In 1, I showed how to forge parts of HTTP requests containing CRs and LFs using Flash. In that write-up, the data was part of the HTTP body section. However, combining the Content-Length overriding...