CVE-2013-5939

Multiple cross-site scripting XSS vulnerabilities in the Guestbook module for PHPCMS allow remote attackers to inject arbitrary web script or HTML via the 1 list or 2 introduce parameter to index.php...

CVE-2013-5939: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in the Guestbook module for PHPCMS allow remote attackers to inject arbitrary web script or HTML via the 1 list or 2 introduce parameter to index.php...

PHPCMS 9.5.3 /phpcms/modules/vote/classes/vote_tag.class.php SQL注入漏洞

No description provided by source...

PHPCMS 9.5.3 /phpcms/modules/content/classes/content_tag.class.php SQL注入漏洞

No description provided by source...

phpcms foreground and(background permissions)getshell1-vulnerability warning-the black bar safety net

1, The first first reception of it, to estimate a lot of stations are starting to fill up. For phpcms 2 0 0 8, the secondary attack category, a secondary analysis getshell it. In uploadfield. php br / $uploadallowext = ! empty$C'uploadallowext' ? $C'uploadallowext' : $info'uploadallowext';/p p //...

phpcms v9 front Desk unlimited GETSHELL-a vulnerability warning-the black bar safety net

0×0 1:An Introduction PHPCMS V9（hereinafter referred to V9 with PHP5+MYSQL as the technical basis for development. V9 using OOP for object mode for running based frame structures. The modular development approach as a function of development forms. Framework easy functionality expansion, code...

PHPCMS 2008 /preview.php SQL注入漏洞

No description provided by source...

PHPCMS 2008 SQL注入漏洞

No description provided by source...

phpcms upload cause getshell detailed and case-vulnerability warning-the black bar safety net

0x01 what is upload vulnerability A lot of cms in order to enrich their functions are to provide the upload an avatar, upload pictures and other functions. But if the uploaded content does not do better than the filter, it is equal to say to the attacker to an arbitrary code execution. For exampl...

phpcms 9.4.2 /phpcms/modules/pay/respond.php 路径泄漏

No description provided by source...

PHPCMS Guestbook Cross Site Scripting

CVE-2013-5939:PHPCMS guestbook module Stored XSS Vulnerability Severity: Important Vendor: phpcms.cn Versions Affected: All of use guestbook module phpcms Description: The phpcms has be found the Stored XSS Vulnerability if use the guestbook module.someone can insert xss code at the front...

PHPCMS v9.3.4 content.php SQL注入漏洞

PHPCMS全版本通杀SQL注入漏洞,测试版本为V9.5.3版本，2014-05-12之前的 存在漏洞的文件/phpcms/modules/member/content.php 202行 edit函数 $info = array; foreach$POST'info' as $k=$v ifinarray$k, $fields $POST'info'$k = newhtmlspecialcharstrimscript$v; $POST'linkurl' = strreplacearray'"','','',",",'...

phpcms multiple versions of the background holding shell vulnerability-vulnerability warning-the black bar safety net

Brief description: phpcms multiple versions of the background holding shell vulnerability. Detailed description: url rules with generated static can get the shell. Vulnerability proof: 1, the landing in the background." Extension"—"the URL rule Management"—"Add a rule" ! 2,“URL rule name”must be...

PHPCMS V9 未明SQL注入漏洞

No description provided by source...

phpcms two at the backend to SQL injection-vulnerability warning-the black bar safety net

A: The http://www.0day5.com/phpcmsv9/index.php?m=member&c=member&a=delete&pchash=GlyB7G&id post userid=select from select fromselect nameconst@@version,0a join select nameconst@@version,0bc II: http://www.0day5.com/phpcmsv9/index.php?m=member&c=membermodel&a=delete&pchash=GlyB7G post modelid=sele...

PHPCMS V9 arbitrary file include vulnerability-vulnerability warning-the black bar safety net

Brief description: Somewhere considered not rigorous, it is possible to cause the file containing the vulnerability. Use Conditions: registerglobal=ON Detailed description: Vulnerability file:/plugin.php Vulnerability code: 2 2 row Trigger conditions: registerglobal=ON Code fragment: 1 5 to 2 2...

phpcms 2007 onunload.inc.php update SQL注入漏洞

code!--?php defined'INPHPCMS' or exit'Access Denied'; $serverid ? 1 : showmessage$LANG'illegaloperation'; $db---query"UPDATE ".TABLEMOVIESERVER." SET num = num-1 WHERE serverid = $serverid AND num 0 "; 2 ?/code $serverid没有进行任何过滤也没有用单引号括起来，所以无视gpc。 核心文件include\common.inc.php里大概80左右变量覆盖漏洞。...

phpcms 2 0 0 7 onunload. inc. php page to an update-type implant is attached using the EXP-bug warning-the black bar safety net

Download a set of phpcms 2 0 0 7 analysis, in the module\movie\onunload. inc. php found a update type of injection. query"UPDATE ". TABLEMOVIESERVER." SET num = num-1 WHERE serverid = $serverid AND num 0 "; ? $serverid is not any filtering and also not enclosed in single quotation marks, so ignor...

PHPCMS 9 /phpsso_server/phpcms/libs/functions/global.func.php 信息泄漏漏洞

PHPCMS是国内一款非常流行的网站内容管理系统，其V9版本中存在信息泄漏漏洞。漏洞根源位于\phpssoserver\phpcms\libs\functions\global.func.php文件，sysanth函数在使用substr时没有判断其参数是否是字符串，从而当外界传入数组时导致服务端抛出异常，攻击者可以通过该漏洞获取服务器文件的绝对路径等信息。 PHPCMS 9...

PHPCMS 9.3.1 /phpcms/modules/attachment/attachments.php 文件上传漏洞

PHPCMS是国内一款非常流行的网站内容管理系统，其9.3.1版本中，当上传文件名为xxx.Php.jpg%20%20%20%20%20%20%20Php时，经过fileext函数反向查找"."，然后截断了Php，即可通过isimage的验证，又由于strpos是大小写敏感的，当后缀为Php时即可绕过strpos，最后上传至服务器，apache服务器可以解析该畸形文件，最终导致文件上传漏洞。 PHPCMS 9.3.1...