YouYax论坛SQL注入漏洞

简要描述： 代码审计之SQL注入，针对这个严谨的厂商，有注入绝不能忍啊，必须是高啊。而且其他都做了addsalsh ，这个是漏的 详细说明： 问题出在register.php文件中 先说fuzz时候是怎么发现的 注册用户的时候发现在第二次注册会给出提醒 alert'注册失败，该IP地址已经使用超过了1次†'; 于是想着用XFF能不能绕过，果断添加X-Forwarded-For字段，就绕过了 然后在X-Forwarded-For这里，修改ip地址为1.1.1.1' and 1=1等等， 测试均成功，由此判断这里肯定是个注入，只不过是个盲注，在外面测试不太方便就没跑库 于是去看源码 关键代码...

CVE-2014-3871

Multiple SQL injection vulnerabilities in register.php in Geodesic Solutions GeoCore MAX 7.3.3 formerly GeoClassifieds and GeoAuctions allow remote attackers to execute arbitrary SQL commands via the 1 cpassword or 2 cusername parameter. NOTE: the b parameter to index.php vector is already covere...

CVE-2014-3871

CVE-2014-3871 documents multiple SQL injection vulnerabilities in Geodesic Solutions GeoCore MAX 7.3.3 (Ge oAuctions/GeoClassifieds) where remote attackers can trigger SQL commands via the register.php parameters (1) c[password] and (2) c[username]. The entry notes that the b parameter in index.p...

PT-2014-5566

Name of the Vulnerable Software and Affected Versions GeoCore MAX version 7.3.3 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the cpassword or cusername parameter in the register.php file. Recommendations For GeoCore MAX version 7.3.3,...

CVE-2014-3871: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in register.php in Geodesic Solutions GeoCore MAX 7.3.3 formerly GeoClassifieds and GeoAuctions allow remote attackers to execute arbitrary SQL commands via the 1 cpassword or 2 cusername parameter. NOTE: the b parameter to index.php vector is already covere...

GeoCore MAX DB Ver. 7.3.3 - Blind SQL Injection

GeoCore MAX DB Ver. 7.3.3 - Blind SQL Injection Exploit Title: GeoCore MAX DB Ver. 7.3.3 - Time-Based Blind Injection Official site: http://geodesicsolutions.com Risk Level: High Vendor : http://geodesicsolutions.com Exploit Author: Esac Homepage author : www.iss4m.ma Last Checked: 25/04/2014...

Sql injection

Multiple SQL injection vulnerabilities in Gnew 2013.1 allow remote attackers to execute arbitrary SQL commands via the 1 newsid parameter to news/send.php, 2 threadid parameter to posts/edit.php, or 3 useremail parameter to users/password.php or 4 users/register.php. NOTE: these issues were SPLIT...

Sql injection

Multiple SQL injection vulnerabilities in Gnew 2013.1 allow remote attackers to execute arbitrary SQL commands via the 1 answerid or 2 questionid parameter to polls/vote.php, 3 storyid parameter to comments/add.php or 4 comments/edit.php, or 5 threadid parameter to posts/add.php. NOTE: this issue...

PT-2014-3384

Name of the Vulnerable Software and Affected Versions Gnew version 2013.1 Description The issue allows remote attackers to execute arbitrary SQL commands. This can be achieved via the news id parameter to "news/send.php", the thread id parameter to "posts/edit.php", or the user email parameter to...

CVE-2013-7289

Multiple cross-site scripting XSS vulnerabilities in register.php in Andy's PHP Knowledgebase Aphpkb before 0.95.8 allow remote attackers to inject arbitrary web script or HTML via the 1 firstname, 2 lastname, 3 email, or 4 username parameter...

CVE-2013-7289

The CVE identifies multiple cross-site scripting (XSS) vulnerabilities in Andy’s PHP Knowledgebase (Aphpkb) before version 0.95.8, exploitable via the register.php endpoint. Specifically, the first_name, last_name, email, or username parameters can be injected with malicious script/HTML to affect...

CVE-2013-7289: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in register.php in Andy's PHP Knowledgebase Aphpkb before 0.95.8 allow remote attackers to inject arbitrary web script or HTML via the 1 firstname, 2 lastname, 3 email, or 4 username parameter...

Gnew 2013.1 Multipe Vulnerabilities

Gnew is a simple and open-source Content Management System. Exploit Title: Gnew 2013.1 Multipe Vulnerabilities Date: 17/04/2013 Author: Elite Trojan Category:: webapps Google dork: N/A Tested on: linux + windows IVerified XSS +Vulnerable File: /users/register.php +Vulnerable Source Code: $userema...

Free Hosting Manager 2.0.2 - Multiple SQL Injections

Free Hosting Manager 2.0.2 - Multiple SQL Injections ------------------------------------------------------------------------- Software : Free Hosting Manager V2.0.2 Multiple SQLi Author : Saadat Ullah , [email protected] Author home : http://security-geeks.blogspot.com Date : 23/3/13...

WordPress RLSWordPressSearch SQL Injection

Exploit Title : Wordpress RLSWordPressSearch plugin SQL Injection Exploit Author : Ashiyane Digital Security Team Home : ww.ashiyane.org Security Risk : MEdium - SQL Injection Dork : inurl:wp-content/plugins/RLSWordPressSearch/register.php?a=...

CVE-2012-5874

Multiple SQL injection vulnerabilities in the 1 updatewhosonlinereg and 2 updatewhosonlineguest functions in Elite Bulletin Board before 2.1.22 allow remote attackers to execute arbitrary SQL commands via the PATHINFO to a checkuser.php, b groups.php, c index.php, d login.php, e quicklogin.php, f...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in asaanCart 0.9 allow remote attackers to inject arbitrary web script or HTML via the 1 PATHINFO to calc.php, 2 chat.php, 3 register.php, or 4 index.php in libs/smartyajax/; or the 5 page parameter to libs/smartyajax/index.php...

CVE-2012-5330

Multiple cross-site scripting XSS vulnerabilities in asaanCart 0.9 allow remote attackers to inject arbitrary web script or HTML via the 1 PATHINFO to calc.php, 2 chat.php, 3 register.php, or 4 index.php in libs/smartyajax/; or the 5 page parameter to libs/smartyajax/index.php...

CVE-2012-5330

Multiple cross-site scripting XSS vulnerabilities in asaanCart 0.9 allow remote attackers to inject arbitrary web script or HTML via the 1 PATHINFO to calc.php, 2 chat.php, 3 register.php, or 4 index.php in libs/smartyajax/; or the 5 page parameter to libs/smartyajax/index.php...

CVE-2012-5330

As provided, CVE-2012-5330 is an XSS vulnerability in asaanCart 0.9 affecting multiple entry points: the PATH_INFO parameters to calc.php, chat.php, register.php, or index.php in libs/smarty_ajax/, and the page parameter to libs/smarty_ajax/index.php. The description does not specify affected ver...