WebConnection / Toto / Tides Cross Site Scripting

Exploit Title : WebConnection Cross-Site Scripting Vulnerability Author : IrIsT.Ir Discovered By : Am!r Home : http://IrIsT.Ir/forum Software Link : http://www.webconnection.com Security Risk : High Version : All Version Tested on : GNU/Linux Ubuntu - Windows Server - win7 Dork : intext:"Site...

ECMall 2.2 app/groupbuy.app.php delay injection vulnerability-vulnerability warning-the black bar safety net

ECMall community e-Commerce systemreferred to as ECMallis Shanghai commercial school network Technology Co., Ltd. following the ECShop after the launch of yet another e-Commerce sister product app\groupbuy. app. php:2 6: function index $id = empty$GET'id' ? 0 : $GET'id'; //id not filtered if !$ i...

Within the network of broilers Grand chase-bug warning-the black bar safety net

First of all, I first introduce my environment. I Where is a non-engineering colleges work this way, the safety means is relatively weak, this provided me with a lot of the development of the broiler space. Then explain, where the network Here the network address is divided into two categories: １...

Einstein school file sharing network agent weal file permissions

Sensitive information is stored in world readable file...