11 matches found
EUVD-2015-4158
Malware in sbrugna...
CVE-2015-4134
Open redirect vulnerability in goto.php in phpwind 8.7 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the url parameter...
Open redirect
Open redirect vulnerability in goto.php in phpwind 8.7 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the url parameter...
Cross site scripting
Cross-site scripting XSS vulnerability in goto.php in phpwind 8.7 allows remote attackers to inject arbitrary web script or HTML via the url parameter...
CVE-2015-4134
Open redirect vulnerability in goto.php in phpwind 8.7 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the url parameter...
CVE-2015-4135
CVE-2015-4135 is an XSS vulnerability affecting phpwind 8.7, specifically goto.php with the url parameter. The root cause is improper handling of user input leading to injection of arbitrary web script or HTML. Exploitation details or in-the-wild status are not provided in the connected documents...
CVE-2015-4134
Open redirect vulnerability CVE-2015-4134 affects phpwind 8.7, exploitable via the url parameter in goto.php to redirect users to arbitrary websites (phishing risk). Exploitation details, affected versions, and remediations are not provided in the connected documents.
CVE-2015-4135
Cross-site scripting XSS vulnerability in goto.php in phpwind 8.7 allows remote attackers to inject arbitrary web script or HTML via the url parameter...
phpwind 8.7 background to get shell-vulnerability warning-the black bar safety net
phpwind 8.7 background to get the shell The first point to open the background map and then attachment settings to add a ashx suffix 2 0 0 0 size 群 里面 我 以前 扔 的 那个 ashx.txt download back into the fuck. ashx Published article there's an attachment upload the ashx throw up the premise is iis Apache ...
PHPWIND 8.7 手机版 CSRF
简要描述： 手机版的CSRF漏洞，由于手机版和电脑版共用cookie，所以对电脑版也有效 详细说明： 手机版“退出”链接为 index.php?a=quit 帖子内容写： imghttp://xxxxxxx/m/index.php?a=quit/img 看帖后即被退出 漏洞证明： 本地测试成功退出...
phpwind 8.7 querybuilder.class.php sql注入
No description provided by source...