A file inclusion vulnerability exists in the al*** function ma***_tpl parameter of the Qibo blogging system.

Qibo blog system, Qibo software produced by the multi-user blog system. Qibo blog system al function matpl parameter file containment vulnerability, an attacker can exploit the vulnerability contains malicious files, access to server privileges...

SQL Injection Vulnerability in Qibo Blog System

Zibo Blog System is a multi-user blog system. There is a SQL injection leak in the Qibo Blog System. The SQL injection vulnerability is caused due to uninitialized $TBpre in the '/blog/template/space/file/listbbs.php' function, which is registered according to a pseudo-global variable in the Qibo...

Qibo Blog /member/userinfo.php SQL注入漏洞

No description provided by source...

Qibo Blog 1.0 /blog/require/ajax/ol_module.php 本地文件包含漏洞

/blog/require/ajax/olmodule.phpif$step==2 $uid=$lfjuid; @include"template/space/module/$moduleid.php"; /ÐÂÔö¼ÓµÄÄ£¿éʹ֮¿ÉÒÔÍÏÀ­/ //$ThisModule$moduleid=strreplace'class="head"','class="head" onMouseOver="Drag.inint;"',$ThisModule$moduleid; if!$ThisModule$moduleid...

Qibo Blog 1.0 /blog/ajax.php 远程密码修改漏洞

No description provided by source...

Qibo Blog 1.0 /blog/member/update_sort.php SQL注入漏洞

No description provided by source...

Qibo Blog 1.0 /blog/ajax.php SQL注入漏洞

No description provided by source...

齐博博客系统高危漏洞集合(SQL+XSS)

简要描述： 该博客系统是一个类似博客大巴的公共博客平台 两个高危注入+一个可打管理员账号的xss 最新的blog 1.0 http://down.qibosoft.com/down.php?v=blog1.0 详细说明： http://localhost/qibo/bk/blog/member/postlog.php?job=postlog 注册成会员之后发布日志 注入一 问题代码\blog\member\postlog.php if$job=="postlog" if$step==2 if!$title showerr"标题不能为空"; elseif!$content...