CVE-2024-31460: Improper Neutralization of Special Elements used in an SQL Command

Cacti provides an operational monitoring and fault management framework. Prior to version 1.2.27, some of the data stored in automationtreerules.php is not thoroughly checked and is used to concatenate the SQL statement in createallheadernodes function from lib/apiautomation.php , finally resulti...

YUNUCMS \app\admin\controller\Common.php page has secondary injection vulnerability

YUNUCMS enterprise website management system YUNUCMS is a set of professional marketing enterprise building system based on PHP + MYSQL as the core development. YUNUCMS V1.0.7 \app\admin\controller\Common.php page has a secondary injection vulnerability. An attacker can exploit the vulnerability ...

Mastery oa at the secondary injection vulnerability-vulnerability warning-the black bar safety net

Brief description: Paralysis of the software Detailed description: ! QQ 图片 20141215110029.jpg Add the attention of the people, many functions rely on the data code area POST http://121.40.134.14/general/personinfo/concernuser/update.php HTTP/1.1 Host: 121.40.134.14 Connection: keep-alive...

Supesite 前台二次注入一枚

简要描述： 二次猪肉。 详细说明： 在cp.php中 $ac = empty$GET'ac' ? 'profile' : trim$GET'ac'; ifinarray$ac, array'index', 'news', 'profile', 'credit', 'models' includeonceSROOT.'./source/cp'.$ac.'.php'; 包含文件进来 在source/cpnews.php中 $newsarr = array'subject' = $POST'subject', 'catid' = $POST'catid', 'type' =...

74cms 二次注入（鸡肋） 但可以造成命令执行

简要描述： 74cms 二次注入（鸡肋） 但可以造成命令执行，企业用户职位名称存在二次注入 详细说明： 登陆企业用户--》发布职位--》修改职位，如图所示： 对了，这里由于对职位的名称做了长度限制，但是只限于前台限制，故而发包如图所示： 然后点击职位管理，再点击延期，如图所示 点击延期职位按钮，可以发现sleep5被执行，到后台查看sql执行语句为完整语句: INSERT INTO qsmemberslog loguid,logusername,logutype,logtype,logaddtime,logip,logaddress,logvalue VALUES...

ecshop the goods_attr and goods_attr_id two secondary injection vulnerability detailed analysis-vulnerability warning-the black bar safety net

A: goodsattrid secondary injection ! 2 0 1 3 0 7 3 0 1 5 2 7 4 9 1 Injection use process: 1. Add items to your cart, write the injection code to product attribute id http://localhost/test/ecshop/flow.php?step=addtocart POST: goods="quick":1,"spec":"1 6 3","1 5 8'","goodsid":3...

ecshop最新版本前台二次注入系列(1)

简要描述： 二次注入第一枚，通读ecshop代码的结果，我是今天早上从ecshop新下的程序包，你懂的～ 详细说明： 先上结果图： 注入利用过程： 1.添加商品到购物车时，写入注入代码到商品属性id http://localhost/test/ecshop/flow.php?step=addtocart POST: goods="quick":1,"spec":"163","158'","goodsid":32,"number":"1","parent":0 注意，需要spec有两个或以上id 2.在查看购物车页面，点击更新购物车，执行注入代码二次注入嘛，单引号可用了 代码分析：...

dedecms chicken was injected with the details of the analysis process-exploit warning-the black bar safety net

One of the secondary injection because of the word limit, so is particularly tasteless. In addition, I wish you all a Happy New Year ：） Detailed description: 2 3 3 extract$arcRow, EXTRSKIP; 2 3 4 $msg = cnsubstrRTrimMsg$msg, 1 0 0 0; 2 3 5 $username = cnsubstrRHtmlReplace$username, 2, 2 0; 2 3 6...