169 matches found
Phpwind的v4/5/6/7/8命令执行漏洞
简要描述： 07年那阵挖掘的漏洞，正好这次三个白帽搞了个挑战，借这个机会曝光吧，外面估计也有部分人知道这个吧：） 详细说明： hack/bank/index.php $DDESPOSTDB=array; $query=$db-query"SELECT i.uid,username,ddeposit,dstartdate FROM pwmemberinfo i LEFT JOIN pwmembers m ON m.uid=i.uid ORDER BY ddeposit DESC LIMIT $bknum"; while$deposit=$db-fetcharray$query...
phpwind v8.7 /goto.php 跨站脚本漏洞
No description provided by source...
phpwind 9.0 /res/js/dev/util_libs/jPlayer/Jplayer.swf 跨站脚本漏洞
1、漏洞文件为：http://www.phpwind.net/res/js/dev/utillibs/jPlayer/Jplayer.swf2、反编译后看代码：this.jQuery = loaderInfo.parameters.jQuery + "'" + loaderInfo.parameters.id + "'.jPlayer"; …… private function initarg1:TimerEvent:void this.myInitTimer.stop; if ExternalInterface.available ……...
phpwind 9.0 反射XSS漏洞
No description provided by source...
phpwind V9.0 gbk 20130227 宽字符SQL注入
/wind/db/mysql/WindMysqlPdoAdapter.php中class WindMysqlPdoAdapter extends AbstractWindPdoAdapter / non-PHPdoc @see AbstractWindPdoAdapter::setCharset / public function setCharset$charset $charset && $this-query"set names " . $this-quote$charset . ";"; 字符集问题...
CVE-2015-4134
Open redirect vulnerability in goto.php in phpwind 8.7 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the url parameter...
Open redirect
Open redirect vulnerability in goto.php in phpwind 8.7 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the url parameter...
Cross site scripting
Cross-site scripting XSS vulnerability in goto.php in phpwind 8.7 allows remote attackers to inject arbitrary web script or HTML via the url parameter...
CVE-2015-4135
CVE-2015-4135 is an XSS vulnerability affecting phpwind 8.7, specifically goto.php with the url parameter. The root cause is improper handling of user input leading to injection of arbitrary web script or HTML. Exploitation details or in-the-wild status are not provided in the connected documents...
CVE-2015-4134
Open redirect vulnerability in goto.php in phpwind 8.7 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the url parameter...
CVE-2015-4134
Open redirect vulnerability CVE-2015-4134 affects phpwind 8.7, exploitable via the url parameter in goto.php to redirect users to arbitrary websites (phishing risk). Exploitation details, affected versions, and remediations are not provided in the connected documents.
CVE-2015-4135
Cross-site scripting XSS vulnerability in goto.php in phpwind 8.7 allows remote attackers to inject arbitrary web script or HTML via the url parameter...
CVE-2015-4135: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in goto.php in phpwind 8.7 allows remote attackers to inject arbitrary web script or HTML via the url parameter...
CVE-2015-4134: Undefined Security Weakness
Open redirect vulnerability in goto.php in phpwind 8.7 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the url parameter...
PHPWind Open Redirect Vulnerability
PHPWind is a set of PHP-based Web forum program . PHPWind has an open redirection vulnerability that allows an attacker to construct a malicious URI, trick the user into parsing it, and redirect the user to an arbitrary WEB site for phishing attacks...
Unspecified Cross-Site Scripting Vulnerability in PHPWind
PHPWind is a set of PHP-based Web forum program . PHPWind suffers from a cross-site scripting vulnerability that allows remote attackers to exploit the vulnerability to inject malicious script or HTML code, which can be used to obtain sensitive information or hijack user sessions when malicious...
phpwind 8.7 Open Redirect
phpwind v8.7 Unvalidated Redirects and Forwards Web Security Vulnerabilities Exploit Title: phpwind v8.7 goto.php? &url Parameter Open Redirect Security Vulnerabilities Product: phpwind Vendor: phpwind Vulnerable Versions: v8.7 Tested Version: v8.7 Advisory Publication: May 24, 2015 Latest Update...
phpwind 8.7 Cross Site Scripting
phpwind v8.7 XSS Cross-site Scripting Web Security Vulnerabilities Exploit Title: phpwind v8.7 goto.php? &url Parameter XSS Security Vulnerabilities Product: phpwind Vendor: phpwind Vulnerable Versions: v8.7 Tested Version: v8.7 Advisory Publication: May 25, 2015 Latest Update: May 25, 2015...