CVE-2019-11401: Unrestricted Upload of File with Dangerous Type

A issue was discovered in SiteServer CMS 6.9.0. It allows remote attackers to execute arbitrary code because an administrator can add the permitted file extension .aassp, which is converted to .asp because the "as" substring is deleted...

Override Access Vulnerability in SiteServer CMS Administration Backend

SiteServer CMS is a web content management system developed by Beijing Billion Software Technology Development Co. A vulnerability exists in the management background of SiteServer CMS. The vulnerability is due to the background access control using JWT technology for identity authentication, HTT...

Siteserver CMS userlist. aspx parameter userName SQL injection vulnerability

No description provided by source...

Siteserver a SQL injection vulnerability-vulnerability warning-the black bar safety net

In the space on the module there is an injection vulnerability SQL injectionvulnerability file: code area /livefiles/pages/inner/userlist.aspx?ModuleType=Friends&RelatedUserType=Friends&UserModuleClientID=ctl00ctl00TemplateHolderContentHolderctl06&userName=1%27and%20@@version%3E0-- Case: code are...

Siteserver 内容管理系统 /livefiles/pages/inner/userlist.aspx SQL 注入

No description provided by source...

SiteServer cms系统modal_UserView.aspx页面 sql注入漏洞

1.漏洞代码。 在Bin\UserCenter.Pages.dll文件中，UserCenter.BackgroundPages.Modal.UserView类的PageLoad方法中，可以见到如下代码： public void PageLoadobject sender, EventArgs e string text = base.Request.QueryString"UserName"; //获取UserName bool flag2; bool flag = flag2 ? 1u : 0u 4294967295u; ArrayList arrayList; if !flag if...

SiteServer XSS+background uploading(the chicken help combination still very adorable)-vulnerability warning-the black bar safety net

Siteserver XSS+background randomly generated webshell Test version: SiteServer V3. 4. 3 1, The storage-typeXSS, www.xxx.com/UserCenter/main.aspx website content submission, click published,to edit click on the source-insert a periodXSSS,such as”scriptalert2 2 2 2 2 2 2 2 2 2 2/script,click on...

siteserver 4.0 /Beta/dialog/forget.aspx SQL注入漏洞

No description provided by source...

SiteServer 3.6.4 /siteserver/bbs/background_post.aspx SQL注入漏洞

SiteServer 3.6.4 /siteserver/bbs/backgroundpost.aspx文件Tile参数没有合适过滤，导致SQL注入漏洞。 SiteServer 3.6.4...

SiteServer 3.6.4 /siteserver/bbs/background_user.aspx SQL注入漏洞

SiteServer 3.6.4 /siteserver/bbs/backgrounduser.aspx 文件keyword使用了位于/Bin/SiteServer.BBS.dll代码，在接收参数没有合适过滤，导致SQL注入漏洞。 SiteServer 3.6.4...

SiteServer 3.6.4 /siteserver/cms/background_nodeGroup.aspx SQL注入漏洞

No description provided by source...

SiteServer 3.6.4 /SiteServer/cms/console_user.aspx SQL注入漏洞

No description provided by source...

SiteServer 3.6.4 /siteserver/cms/console_logSite.aspx SQL注入漏洞

No description provided by source...

SiteServer 3.6.4 安全模式绕过漏洞

No description provided by source...

SiteServer 3.6.4 /ask/search.aspx SQL注入漏洞

No description provided by source...

SiteServer 3.6.4 /siteserver/cms/modal_contentGroupAdd.aspx SQL注入漏洞

No description provided by source...

SiteServer 3.6.4 /siteserver/UserRole/background_userAdd.aspx SQL注入漏洞

No description provided by source...

SiteServer 3.6.4 /siteserver/cms/modal_contentTagAdd.aspx SQL注入漏洞

No description provided by source...

SiteServer 3.6.4 /siteserver/cms/background_channelsGroup.aspx SQL注入漏洞

No description provided by source...

siteserver latest version 3. 6. 4 sql inject-vulnerability warning-the black bar safety net

http://xxx.com/siteserver/service/backgroundtaskLog.aspx?Keyword=test%' and @@version=1 and 2='1&DateFrom=&DateTo=&IsSuccess=All The injection point is present in the Keyword, completely without any filtering. VariousSQL injectiontype, you can execute os cmd, off pants 2. The second injection...