117 matches found
Simplog-Exploit
Simplog-Exploit 本仓库包含针对 CVE-2009-4092 Simplog CSRF 漏洞的环境搭建、漏洞利用和补丁。 该漏洞存在于 Simplog 0.9.3.2 的 user.php 文件中，Simplog 是一款 Web 应用程序，用于帮助用户在其个人网站上轻松创建和维护博客。攻击者可以利用跨站请求伪造（CSRF），通过发送恶意请求更改密码，从而劫持用户身份验证过程。 设置 我们的环境搭建包括一个能够处理 PHP 页面的 Apache Web 服务器（运行在 localhost 上），以及一个托管在同一台服务器上的 MySQL 数据库。 漏洞利用 补丁 免责声明...
EUVD-2006-1077
Malware in sbrugna...
EUVD-2006-1778
Malware in sbrugna...
EUVD-2006-2029
Malware in sbrugna...
EUVD-2006-2030
Malware in sbrugna...
EUVD-2006-5383
Malware in sbrugna...
EUVD-2009-4064
Malware in sbrugna...
EUVD-2006-1076
Malware in sbrugna...
EUVD-2009-4063
Malware in sbrugna...
EUVD-2006-4051
Malware in sbrugna...
EUVD-2009-4062
Malware in sbrugna...
EUVD-2005-3076
Malware in sbrugna...
SUSE CVE-2006-0147
Dynamic code evaluation vulnerability in tests/tmssql.php test script in ADOdb for PHP before 4.70, as used in multiple products including 1 Mantis, 2 PostNuke, 3 Moodle, 4 Cacti, 5 Xaraya, 6 PhpOpenChat, possibly 7 MAXdev MD-Pro, and 8 Simplog, allows remote attackers to execute arbitrary PHP...
Simplog 0.9.3 ImageList.PHP Cross-Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/17653/info Simplog is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script...
Simplog <= 0.9.3 (tid) Remote SQL Injection Exploit
No description provided by source. !/usr/bin/perl Method found & Exploit scripted by nukedx Contacts ICQ: 10072 MSN/Main: [email protected] web: www.nukedx.com Original advisory: http://www.nukedx.com/?viewdoc=25 Usage: simplog.pl host path use IO::Socket; if@ARGV != 2 usage; else exploit; sub...
Simplog <= 0.9.2 (s) Remote Commands Execution Exploit
No description provided by source. !/usr/bin/php -q -d shortopentag=on ? echo Simplog = 0.9.2 \s\ remote cmmnds xctn\r\n; echo by rgod [email protected]\r\n; echo site: http://retrogod.altervista.org\r\n\r\n; echo dork: intext:\Powered by simplog\r\n\r\n; if $argc5 echo Usage: php .$argv0. host...
Simplog 0.9.3.2 - Mutliple Vulnerabilities
No description provided by source. Mutliple Vulnerabilities in Simplog v0.9.3.2 Name Multiple vulnerabilities in Simplog Systems Affected Simplog 0.9.3.2 and possibly earlier versions Download http://sourceforge.net/projects/simplog/files/simplog/0.9.3.2/simplog-0.9.3.2.tar.gz/download Author Amo...
Simplog 0.9.3 Archive.PHP PID Parameter Cross-Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/20900/info Simplog is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code execute in the browser of an...
Simplog 0.9.3 BlogID Parameter Multiple SQL Injection Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/20899/info Simplog is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an attacker to...
Simplog 0.9.3 Archive.PHP SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/21843/info Simplog is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an attacker to...