Uzbey: Information Disclosure (phpinfo())

URL :- https://staging.uzbey.com/phpinfo.php Description :- phpinfo is a debug functionality that prints out detailed information on both the system and the PHP configuration. An attacker can obtain information such as: •Exact PHP version. •Exact OS and its version. •Details of the PHP...

逐浪cms两处文件上传漏洞（有服务器环境限制）

简要描述： 也是要结合iis6的解析漏洞，不知道这两处跟之前提交的会不会重复 详细说明： 由于官网不是iis6的环境 我本地进行测试 第一处 http://127.0.0.1/Plugins/ckfinder/ckfinder.html 在左边文件夹Files下新建字幕了1.asp 然后点击1.asp目录然后上传图片木马3.gif 然后右键查看文件 就可以看到文件地址了 文件地址 http://127.0.0.1/UploadFiles/files/1.asp/3.GIF 第二处 http://127.0.0.1/plugins/imageupload.aspx protected vo...

Fedora 19 : perl-CGI-Application-4.50-7.fc19 (2014-2998)

CGI::Application suffers from a flaw where, in certain cases, it would unexpectedly dump a complete set of web query data and server environment information as an error page. This could allow unintended disclosure of sensitive information. This update patches CGI::Application to no longer do so...

[SE-2012-01] Yet another Reflection API flaw affecting Oracle's Java SE

Hello All, Today, a vulnerability report with an accompanying Proof of Concept code was sent to Oracle notifying the company of a new security weakness affecting Java SE 7 software. The new flaw was verified to affect all versions of Java SE 7 including the recently released 1.7.021-b11. It can b...

shopex front Desk ordinary users getshell vulnerabilities-vulnerability warning-the black bar safety net

Use method: First: Think of a way to find the target site's absolute path http://www.test.com/install/svinfo.php?phpinfo=true http://www.test.com/core/api/shopapi.php http://www.test.com/core/api/site/2.0/apib2b20cat.php http://www.test.com/core/api/site/2.0/apib2b20goodstype.php...

Innovation factory security po information disclosure vulnerability A and solution-vulnerability warning-the black bar safety net

Brief description: CDN most afraid of leaking the user's original server address, once leaked, the so-called security services is non-existent. Safe treasure the presence of multiple information disclosure vulnerabilities, the first report of the series! Detailed description: Information disclosu...

codeigniter -- SQL injection vulnerability

The CodeIgniter changelog reports: An improvement was made to the MySQL and MySQLi drivers to prevent exposing a potential vector for SQL injection on sites using multi-byte character sets in the database client connection. An incompatibility in PHP versions 5.0.7 with mysqlsetcharset creates a...

PHPCMS V9 Cross-Station 2 and repair-vulnerability warning-the black bar safety net

Some place it with the filter, the Server environment registerglobals = On time directly toXSS and... Fishing fishing. Nothing. In order to rank before the issue. Well well to. Detail:/install/header. tpl. php? step=b&stepsb=cc/titlescriptalert1 1 1;/scriptyou fuck your own test to go. In order t...

PHPCMS V9 Cross-Station 2 and repair-vulnerability warning-the black bar safety net

Some place it with the filter, the Server environment registerglobals = On time directly toXSS and... Fishing fishing. Nothing. In order to rank before the issue. Well well to. Detail:/install/header. tpl. php? step=b&stepsb=cc/titlescriptalert1 1 1;/script You fuck your own test to go. In order ...

CVE-2011-1724

Unspecified vulnerability in HP Virtual Server Environment before 6.3 allows remote authenticated users to gain privileges via unknown vectors...

CVE-2011-1724

Unspecified vulnerability in HP Virtual Server Environment before 6.3 allows remote authenticated users to gain privileges via unknown vectors...

CVE-2011-1724

CVE-2011-1724 describes an unspecified vulnerability in HP Virtual Server Environment for Windows prior to version 6.3 that could allow remote authenticated users to escalate privileges. The NVD entry lists a CVSS v2 base score of 6.0 (Network vector, single authentication, partial confidentialit...

PT-2011-3324

Name of the Vulnerable Software and Affected Versions HP Virtual Server Environment versions prior to 6.3 Description The issue allows remote authenticated users to gain privileges via unknown vectors. Recommendations For versions prior to 6.3, update to version 6.3 or later to resolve the issue...

CVE-2011-1724: Undefined Security Weakness

Unspecified vulnerability in HP Virtual Server Environment before 6.3 allows remote authenticated users to gain privileges via unknown vectors...

HP Virtual Server Environment Detection

The remote Windows host contains HP Virtual Server Environment, an application for managing virtual server infrastructures. C Tenable Network Security, Inc. include'compat.inc'; if description scriptid53623; scriptversion"1.10"; scriptsetattributeattribute:"pluginmodificationdate",...

HP Virtual Server Environment Remote Privilege Escalation

According to its version, the HP Virtual Server Environment install on the remote Windows host is affected by a remote privilege escalation vulnerability that is triggered by an unspecified condition. C Tenable Network Security, Inc. include'compat.inc'; if description scriptid53624;...

CVE-2010-3990

Unspecified vulnerability in HP Virtual Server Environment before 6.2 allows remote attackers to read arbitrary files via unknown vectors...

CVE-2010-3990

Unspecified vulnerability in HP Virtual Server Environment before 6.2 allows remote attackers to read arbitrary files via unknown vectors...

PT-2010-5222

Name of the Vulnerable Software and Affected Versions HP Virtual Server Environment versions prior to 6.2 Description The issue allows remote attackers to read arbitrary files. The exact vectors used for the attack are not specified. Recommendations For versions prior to 6.2, update to version 6....

CVE-2010-3990: Undefined Security Weakness

Unspecified vulnerability in HP Virtual Server Environment before 6.2 allows remote attackers to read arbitrary files via unknown vectors...