169 matches found
PHPWind 5.0.1 - 'AdminUser' Blind SQL Injection
126 $result.=" ."; else $resul...
PHPWind 5.0.1 - AdminUser Blind SQL Injection
PHPWind 5.0.1 - AdminUser Blind SQL Injection...
phpwind search.php 0day Exp
No description provided by source. html head meta http-equiv="Content-Type" content="text/html; charset=gb2312" titlephpwind /title style type="text/css" body,td font-family: "Tahoma"; font-size: "12px"; line-height: "150%"; .smlfont font-family: "Tahoma"; font-size: "11px"; .INPUT FONT-SIZE:...
PHPWIND2.02 & PHPWIND3.31ce权限提升漏洞
主要的原因是在于Job.php中产生的,但是操作的行为却在很大程度上迷惑了许多人,包括我在测试漏洞的时候都认为是Profile.php中的$Proicon变量引起的. 其实这个变量确实存在问题,而且可以直接导致一些恶意事件的发生.但是利用的两方面,一个是在Php中组合字符串,形成我们要说的漏洞,另外一个则是形成了删除任意文件的漏洞... 首先我们需要看看漏洞形成,在profile.php中的$proicon中,变量没有经过任何处理直接提交,系统中的变量经过了PHP的GPC转义.到了MySQL中一个XSS隐患.这是最重要的...
PHPWIND论坛存在严重安全隐患
PHPWIND论坛是一个采用 PHP 和 MySQL 等其他多种数据库构建的高效论坛解决方案。 PHPWIND存在严重安全隐患，会导致恶意用户可以得到论坛最高权限！ PHPWIND 4.3.2 – PHPWIND 5.0.0 Beta 暂未发布任何安全补丁。 请到官方下载最新版本。...
PHPWIND 2.0.1论坛直接写入木马漏洞
在程序运行时，我抓了一个包： GET /phpwind/job.php?previewjob=preview&Dname=./attachment/set.php&tidwt= chr46.chr47.chr101.chr114.chr114.chr111.chr114.chr46.chr112.chr104.chr112,w, chr60.chr63.chr32.chr101.chr118.chr97.chr108.chr40.chr36.chr95.chr80.chr79...
PHPWind Board faq.php skin Parameter Remote File Inclusion
The remote host is running PHPWind Board, a web-based bulletin board. There is a flaw in older versions of this software in the file 'faq.php' that could allow an attacker to gain a shell on this host. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc';...
[UNIX] PHPWind Skin Vulnerability (Exploit)
The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion The SecuriTeam alerts list - Free, Accurate, Independent. Get your security news from a reliable source...