SiteEngine <= 7.1 SQL Injection Vulnerability

Exploit for php platform in category web applications ============================================= SiteEngine = 7.1 SQL Injection Vulnerability ============================================= Title: SiteEngine 7.1 SQL injection Vulnerability Date: 2010-11-25 Author: Beach Team: www.linux520.com...

SiteEngine 7.1 - SQL Injection

SiteEngine 7.1 - SQL Injection Title: SiteEngine 7.1 SQL injection Vulnerability Date: 2010-11-25 Author: Beach Team: www.linux520.com Vendor: www.siteengine.net www.boka.cn Dork: "Powered by SiteEngine" //300,000 + Language:PHP Greetz: birdarmy Description: Exploit this vulnerability comment mus...

SiteEngine 6.0 SQL注入漏洞

网站引擎SiteEngine,全称：博卡网站引擎管理系统，软件基于PHP程序和Mysql数据库开发，采用B/S体系结构。 利用这个漏洞需要评论功能开启默认开启 SiteEngine 6.0 厂商补丁： SiteEngine ------- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.siteengine.net/...

SiteEngine 7.1 SQL注入漏洞

网站引擎SiteEngine,全称：博卡网站引擎管理系统，软件基于PHP程序和Mysql数据库开发，采用B/S体系结构。 利用这个漏洞需要评论功能开启，默认开启 SiteEngine 7.1 厂商补丁： SiteEngine ------- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.siteengine.net/ 企业门户版本:...

SiteEngine 7.1 - SQL Injection

Title: SiteEngine 7.1 SQL injection Vulnerability Date: 2010-11-25 Author: Beach Team: www.linux520.com Vendor: www.siteengine.net www.boka.cn Dork: "Powered by SiteEngine" //300,000 + Language:PHP Greetz: birdarmy Description: Exploit this vulnerability comment must be enabled default == enable...

SiteEngine 博卡网站引擎管理系统5.1.0 存在文件上传漏洞

网站引擎SiteEngine,全称：博卡网站引擎管理系统，软件基于PHP程序和Mysql数据库开发，采用B/S体系结构。 首先先看第一段代码.是对文件后缀进行检查的。 1. 2. $attach'name' = $filename = strreplace " ", "", $attach'name' ; //去掉文件名的空格 3. $attach'ext' = $extension = strtolower fileext $attach'name' ; //取得文件的后缀名并变成小写 4. 5. //转义文件后缀名的正则表达式字符，并匹配合法的文件后缀名 6. if...

SiteEngine CMS 5.1.0 file upload vulnerability-vulnerability warning-the black bar safety net

Website engineSiteEngine,name: Boca website, the engine management system, The Beijing Boca vanguard Software Development Co., Ltd. in 2 0 0 2-year independent research and development, with intellectual property rights of a marketing type website construction management class software. At the sa...

SiteEngine CMS 5.1.0 文件上传漏洞

网站引擎SiteEngine,全称：博卡网站引擎管理系统，是北京博卡先锋软件开发有限公司于2002年自主研发的，具有知识产权的一款营销型网站建设管理类软件。同时，网站引擎于2004年通过中国软件评测中心CSTC软件产品测试，是获得国家信息产业部认可的软件产品。 软件基于PHP程序和Mysql数据库开发，完全采用B/S体系结构，无客户端，可跨Unix/Lin- ux/FreeBSD/Solaris/Windows2000/XP/2003/Vista等操作系统平台应用...

SiteEngine 5.x Multiple Remote Vulnerabilities

Due to incorrect use of intval function, leading to the logic of inspection parameters can be bypassed, resulting in SQL injection vulnerability. -=0x01=- SQL injection Vulnerability vul code like this: if intval $id requireonce $siteengineroot."lib/rss.php" ; $sql = "SELECT url FROM...

SiteEngine 5.x Multiple Remote Vulnerabilities

No description provided by source. SiteEngine 5.x Multiple Remote Vulnerabilities Due to incorrect use of intval function, leading to the logic of inspection parameters can be bypassed, resulting in SQL injection vulnerability. -=0x01=- SQL injection Vulnerability vul code like this: if intval $i...

UC Gateway Investment SiteEngine 5.0 - api.php Open Redirection

UC Gateway Investment SiteEngine 5.0 - api.php Open Redirection source: https://www.securityfocus.com/bid/31888/info SiteEngine is prone to a remote URI-redirection vulnerability because the application fails to properly sanitize user-supplied input. A successful exploit may aid in phishing-style...

SiteEngine 5.x - Multiple Vulnerabilities

SiteEngine 5.x - Multiple Vulnerabilities SiteEngine 5.x Multiple Remote Vulnerabilities Due to incorrect use of intval function, leading to the logic of inspection parameters can be bypassed, resulting in SQL injection vulnerability. -=0x01=- SQL injection Vulnerability vul code like this: if...

UC Gateway Investment SiteEngine 5.0 - announcements.php SQL Injection

UC Gateway Investment SiteEngine 5.0 - announcements.php SQL Injection source: https://www.securityfocus.com/bid/31889/info SiteEngine is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue cou...

SiteEngine 5.x Multiple Remote Vulnerabilities

Exploit for unknown platform in category web applications ============================================== SiteEngine 5.x Multiple Remote Vulnerabilities ============================================== Due to incorrect use of intval function, leading to the logic of inspection parameters can be...

UC Gateway Investment SiteEngine 5.0 - 'announcements.php' SQL Injection

source: https://www.securityfocus.com/bid/31889/info SiteEngine is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modify...

UC Gateway Investment SiteEngine 5.0 - 'api.php' Open Redirection

source: https://www.securityfocus.com/bid/31888/info SiteEngine is prone to a remote URI-redirection vulnerability because the application fails to properly sanitize user-supplied input. A successful exploit may aid in phishing-style attacks. SiteEngine 5.0 is vulnerable; other versions may also ...

SiteEngine 5.x - Multiple Vulnerabilities

SiteEngine 5.x Multiple Remote Vulnerabilities Due to incorrect use of intval function, leading to the logic of inspection parameters can be bypassed, resulting in SQL injection vulnerability. -=0x01=- SQL injection Vulnerability vul code like this: if intval $id requireonce...