877 matches found
CVE-2013-1804
Multiple cross-site scripting XSS vulnerabilities in PHP-Fusion before 7.02.06 allow remote attackers to inject arbitrary web script or HTML via the 1 highlight parameter to forum/viewthread.php; or remote authenticated users with certain permissions to inject arbitrary web script or HTML via the...
ionCube Loader Wizard 'loader-wizard.php'多个安全漏洞
Bugtraq ID:66531 ionCube Loader Wizard是一款基于WEB的应用。 ionCube Loader Wizard允许攻击者利用漏洞获取phpinfo信息，下载配置文件，进行反射型跨站脚本攻击，下载任意文件。 0 ionCube Loader Wizard 2.42 ionCube Loader Wizard 2.36 ionCube Loader Wizard 2.46版本已修复该漏洞，建议用户下载使用： http://www.ioncube.com/loaders.php...
ionCube Loader < 2.46 Multiple Vulnerabilities - Active Check
ionCube Loader is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Horde 3.1.x <= 5.1.1 RCE Vulnerability - Active Check
Horde is prone to a remote code execution RCE vulnerability. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:horde:hordegroupware...
程式舞曲储存型又一xss（2）附后台getshell
简要描述： 好吧 亲爱的广商我又来了。。发现这个广商态度还是很不错的 ，这样才能让自己的产品更加完善。 详细说明： 一： xss 添加 文章处 直接提交 xss代码 会被过滤。用 火狐live http replay post提交 好吧。。后台审核文章，编辑，看下源码 插进去鸟 二 ：getshell 收到 cookie后 修改基本信息 可以看到 phpinfo执行了 https://images.seebug.org/upload/201403/032006511cd14c570f32f55700c5aea2f2cc...
Discuz的利用UC_KEY进行getshell
简要描述： 知key得shell。 详细说明： $configfile = pregreplace"/define'UCAPI',\s'.?';/i", "define'UCAPI', '".addslashes$UCAPI."';", $configfile; 这句代码是有漏洞的。 如果我第一次提交的是 ';phpinfo; define那句就变成了 define'UCAPI','';phpinfo;'; 那么我下一次提交呢？ 非贪婪匹配会匹配到 define'UCAPI',''; phpinfo;就留下来了。 漏洞证明：...
osCmax e-Commerce v2.5.3 (FU/ObjectInject) Multiple Vulnerabilities
osCmax e-Commerce v2.5.3 is suffer from multiple vulnerabilities remote attacker can upload file/shell via header attacks or exec a JavaScript Code & Inject a remote Object see also : CVE-2013-4144 Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site :...
WebTester 5.x Multiple Vulnerabilities
========================================================================================== WebTester 5.x Multiple Vulnerabilities ==========================================================================================...
Shopex V4. 8. 4|V4. 8. 5 download an arbitrary file vulnerability-vulnerability warning-the black bar safety net
The use of the premise is to program the application to the database server and if possible even outside, this is critical. Your engage in Station time to meet with the station, online can't find the version of the vulnerability, their own get back to the source to read a bit. Find a loophole, or...
ZonPHP V2.25 Remote Code Execute Vulnerability
Exploit for php platform in category web applications "; $headers = array"User-Agent: Mozilla/5.0 Windows NT 6.0; WOW64; rv:24.0 Gecko/20100101 Firefox/24.0", "Content-Type: text/plain"; $rc = curlinit; curlsetopt$rc, CURLOPTURL, $url.$path.$filename; curlsetopt$rc, CURLOPTHTTPHEADER, $headers;...
ZonPHP 2.25 - Remote Code Execution
Exploit Title: ZonPHP V2.25 RCE Vulnerability Google Dork: intext:"Made by SLAPER" Date: 21-10-2013 Exploit Author: Halim Cruzito Vendor Homepage: http://www.slaper.be Software Link: http://www.slaper.be/zonPHPv225.zip Version: v2.25 Tested on: Windows 7 PoC: "; $headers = array"User-Agent:...
WebTester 5.x Multiple Vulnerabilities
WebTester 5.x Multiple Vulnerabilities suffer from SQL Injection Vulnerability, Arbitrary File Upload Vulnerability, PHPInfo Disclosure and Leftover install.php File. ========================================================================================== WebTester 5.x Multiple Vulnerabilities...
WebTester 5.x - Multiple Vulnerabilities
WebTester 5.x - Multiple Vulnerabilities ========================================================================================== WebTester 5.x Multiple Vulnerabilities ==========================================================================================...
WebTester 5.x - Multiple Vulnerabilities
========================================================================================== WebTester 5.x Multiple Vulnerabilities ==========================================================================================...
WebTester 5.x SQL Injection / File Upload / Disclosure
========================================================================================== WebTester 5.x Multiple Vulnerabilities ==========================================================================================...
Ajax PHP Penny Auction 1.x 2.x - Multiple Vulnerabilities
Ajax PHP Penny Auction 1.x 2.x - Multiple Vulnerabilities Ajax PHP Penny Auction 1.x 2.x multiple Vulnerabilities Found by : Taha Hunter Info : Ajax PHP Penny Auction is one of the most proven and reliable Penny Auction software options available on the market. Based on a proprietary AJAX Streami...
Ajax PHP Penny Auction 1.x 2.x - Multiple Vulnerabilities
Ajax PHP Penny Auction 1.x 2.x multiple Vulnerabilities Found by : Taha Hunter Info : Ajax PHP Penny Auction is one of the most proven and reliable Penny Auction software options available on the market. Based on a proprietary AJAX Streaming Engine which has four years of refinement and debugging...
CVE-2013-2744
importbuddy.php in the BackupBuddy plugin 2.2.25 for WordPress allows remote attackers to obtain configuration information via a step 0 phpinfo action, which calls the phpinfo function...
Default configuration
importbuddy.php in the BackupBuddy plugin 2.2.25 for WordPress allows remote attackers to obtain configuration information via a step 0 phpinfo action, which calls the phpinfo function...
