74cms(20141027)多处二次注入

简要描述： 看完了xfkxfk大神的 http://wooyun.org/bugs/wooyun-2010-070827 http://wooyun.org/bugs/wooyun-2014-070858 对74cms尝试了下，果然有收货。 详细说明： 1. user/company/companyajax.php elseif$act=="promotionaddsave" reportdeal$uid,2,$points; $userpoints=getuserpoints$uid;...

Simple e-Document 1.31 SQL Injection / XSS / CSRF / File Upload

+Exploit: Simple e-document v1.31 = Sql inj,Login Bypass,XSS,Insecure Cookie Handlingprivilege escalation,Arbitrary File Upload, Second order injections, CSRF ,Insecure logout process + Author: PuN!Sh3r + Contact: http://anti-armenia.org + version: Simple e-document v1.31 + Vendor Homepage:...