汇文手机图书馆不用密码获取用户信息

简要描述： 生成认证token，只用用户名即可获取用户信息 详细说明： 将用于认证的token的生成方式在客户端实现且生成方式与密码无关 影响院校列表 http://www.libsys.com.cn/huiwenappcenter2.php 漏洞证明： import java.io.UnsupportedEncodingException; import java.math.BigInteger; / Created by snail on 14-11-23. / public class LibToken public static String makeTokenString s...

CMS Made Simple 1.11.9 - Multiple Vulnerabilities

Vulnerabilities in CMS Made Simple, version 1.11.9 Discovered by Pedro Ribeiro [email protected] of Agile Information Security Reported to [email protected] and [email protected] Disclosure: 28/02/2014 / Last updated: 12/10/2014 CMS Made Simple, an open source content management...

Sun Solaris 9 RPC Request Denial of Service Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/21964/info The Solaris operating system is prone to a denial-of-service vulnerability. An attacker can exploit this issue to crash the 'rpcbind1M' server, denying service to legitimate users. /...

Windows XP TCP Packet Fragmentation Handling Denial of Service Vulnerability (1)

No description provided by source. source: http://www.securityfocus.com/bid/11258/info Multiple vendor implementations of the TCP stack are reported prone to a remote denial-of-service vulnerability. The issue is reported to present itself due to inefficiencies present when handling fragmented TC...

Frog CMS 0.9.5 - Multiple CSRF Vulnerabilities

No description provided by source. !--- Title: Frog CMS 0.9.5 Multiple CSRF Vulnerabilities Author: 10n1z3d 10n1z3datwdotcn Date: Sun 11 Jul 2010 10:22:48 AM EEST Vendor: http://www.madebyfrog.com/ Download: http://www.madebyfrog.com/public/download/files/frog095.tar.gz --- -= CSRF PoC 1 - Create...

AppFish Offline Coder v2.2 iOS - Persistent Software Vulnerability

Document Title: =============== AppFish Offline Coder v2.2 iOS - Persistent Software Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1252 Release Date: ============= 2014-04-08 Vulnerability Laboratory ID VL-ID:...

APPLE-SA-2013-06-04-2 Safari 6.0.5

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 APPLE-SA-2013-06-04-2 Safari 6.0.5 Safari 6.0.5 is now available and addresses the following: WebKit Available for: OS X Lion v10.7.5, OS X Lion Server v10.7.5, OS X Mountain Lion v10.8.3 Impact: Visiting a maliciously crafted website may lead to an...

Snippet CMS 2.9 Cross Site Scripting

Exploit Title: Snippet CMS v2.9 XSS Vulnerability Google Dork: "Powered by Snippet CMS" Date: 23.09.2011 Author: CoBRa21 Version: 2.9 Tested on: Unix Server ------------------------------------------------------------------------------------------------------- Exploits...

phpMyBitTorrent 2.0.4 - SQL Injection

phpMyBitTorrent 2.0.4 - SQL Injection Exploit Title: phpMyBitTorrent 2.0.4 SQL injection Google Dork: inurl:"user.php?op=register" Date: 14/FEB/2011 Author: [email protected] Software Link: http://sourceforge.net/projects/phpmybittorrent/ Version: 2.0.4 Tested on: nix...

Frog CMS 0.9.5 Cross Site Request Forgery

Date: Sun 11 Jul 2010 10:22:48 AM EEST Vendor: http://www.madebyfrog.com/ Download: http://www.madebyfrog.com/public/download/files/frog095.tar.gz --- -= CSRF PoC 1 - Create Admin User =- Frog CMS 0.9.5 Multiple CSRF Vulnerabilities - Create Admin User -= CSRF PoC 2 - Delete User =- -= CSRF PoC 3...

Frog CMS 0.9.5 Multiple CSRF Vulnerabilities

Exploit for php platform in category web applications ============================================ Frog CMS 0.9.5 Multiple CSRF Vulnerabilities ============================================ Date: Sun 11 Jul 2010 10:22:48 AM EEST Vendor: http://www.madebyfrog.com/ Download:...

Frog CMS 0.9.5 - Multiple Cross-Site Request Forgery Vulnerabilities

Frog CMS 0.9.5 - Multiple Cross-Site Request Forgery Vulnerabilities Date: Sun 11 Jul 2010 10:22:48 AM EEST Vendor: http://www.madebyfrog.com/ Download: http://www.madebyfrog.com/public/download/files/frog095.tar.gz --- -= CSRF PoC 1 - Create Admin User =- Frog CMS 0.9.5 Multiple CSRF...

Frog CMS 0.9.5 - Multiple Cross-Site Request Forgery Vulnerabilities

Date: Sun 11 Jul 2010 10:22:48 AM EEST Vendor: http://www.madebyfrog.com/ Download: http://www.madebyfrog.com/public/download/files/frog095.tar.gz --- -= CSRF PoC 1 - Create Admin User =- Frog CMS 0.9.5 Multiple CSRF Vulnerabilities - Create Admin User -= CSRF PoC 2 - Delete User =- -= CSRF PoC 3...

Ding Feng enterprises smart built Station system injection search injection vulnerability analysis and exploit-vulnerability warning-the black bar safety net

Author: L4nk0rMo if you are asked Yesterday the use of this system to get a webshell, but is the use of download the default database, the latter the discoverer of the system interface's also good, by the look of IT security. This article on its search injection vulnerability simple analysis and...

Billwerx RC 3.1 - Multiple Vulnerabilities

Billwerx RC 3.1 - Multiple Vulnerabilities Billwerx RC v3.1 Multiple Vulnerabilities Found By: mrme Download: http://www.billwerx.com/download.php Tested On: Windows Vista Note: For educational purposes only XSS POC: A regular employee can embed javascript code that could be executed within the...

Vulnerabilities in FileDownload Snippet for MODx

Здравствуйте 3APA3A! Сообщаю вам о найденных мною Directory Traversal и Full path disclosure уязвимостях в FileDownload Snippet для MODx. Directory Traversal: http://site/assets/snippets/filedownload/download.php?path=YnVpbGRz&fileName=../index.php Данная уязвимость может использоваться для...

NewsCMSlite Insecure Cookie Handling

www.BugReport.ir AmnPardaz Security Research Team Title: NewsCMSlite Vendor: http://www.katywhitton.com Bug: Insecure Cookie Handling Exploitation: Remote with browser Fix: N/A Original Advisory: http://www.bugreport.ir/index62.htm - Description: NewsCMSlite is an easy way to get regularly update...

OpenX 2.6.3 Local File Inclusion

I have found a local file inclusion exploit in OpenX 2.6.3, this is in the script "fc.php", located in /www/delivery/ Here is a snip of the code: snip includeonce '../../init-delivery.php'; $MAXPLUGINSADPLUGINNAME = 'MAXtype'; if!isset$GET$MAXPLUGINSADPLUGINNAME echo $MAXPLUGINSADPLUGINNAME . ' i...

OneCMS 2.4 Remote SQL Injection / Upload Vulnerabilities

No description provided by source. WwW.BugReport.ir AmnPardaz Security Research Team Title: OneCMS Vulnerabilities Vendor: http://www.insanevisions.com Bugs: SQL Injection Authentication bypass , Arbitrary file upload! Vulnerable Version: 2.4 prior versions also may be affected Exploitation: Remo...

SERV-U 6.4 provide the right method,pass to kill SERV-U version-bug warning-the black bar safety net

Modify ftpport 2 1 Modify the newdomain behind goldsun| IPas to the right of the server's IP address| Modify the newuser behind-IP=IP address the same as aboveto the right of the IP address of the server...OK..... Provide the right...will use FTP to add a can Execute command the user..... Have a...