DVWA Pro-test CSRF vulnerability-vulnerability warning-the black bar safety net

CSRF is a cross-site request forgery, i.e., a user at A site after login in the same client of the Site B using the vulnerability to get A site's Cookie and other authentication information, and forgery as legitimate identity request to A site. This article in the local environment, carry out the...

phpstudy.php.cn XSS vulnerability

Open Bug Bounty ID: OBB-645357 Description| Value ---|--- Affected Website:| phpstudy.php.cn Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

dedecms最新版本后台getshell

官方下载最新安装包http://updatenew.dedecms.com/base-v57/package/DedeCMS-V5.7-UTF8-SP2.tar.gz 环境：Linux+phpstudy 上传图片抓包 POST /dedecms/include/dialog/selectimagespost.php?CKEditor=body&CKEditorFuncNum=2&langCode=zh-cn HTTP/1.1 Host: Content-Length: 42080 Cache-Control: max-age=0 Origin: http://...

phpstudy.net XSS vulnerability

Open Bug Bounty ID: OBB-275008 Description| Value ---|--- Affected Website:| phpstudy.net Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

thinksns apps\public\Lib\Action\AttachAction.class.php arbitrary file upload

Arbitrary file upload getshell vulnerabilities in C:\phpStudy\WWW\apps\public\Lib\Action\AttachAction.class.php中的ajaxUpload函数 You can see the first 192 lines $options'allowexts' = tjiemi$REQUEST'exts'; Get the variable exts, and then after jiemi function of the processing, the jiemi function in...