South data enterprise 0day vulnerability affects versions: v10. 0 v11. 0-vulnerability warning-the black bar safety net

A direct proof of the user password. Take the shell method looks like there are 3 kinds of 1, registered users to upload get a shell, this comparison directly, can not into the background and don't know the username and password case. 2, into the background of the BACKUP DATABASE 3, in the site...

South data enterprise latest injection vulnerability-vulnerability warning-the black bar safety net

By: A XoL-! http://www.tsbct.com Found to date: 2008-09-25 Affected version: v10. 0 v11. 0 Trojan: '%20union%20select%2 0 0,username%2BCHR1 2 4%2Bpassword,2,3,4,5,6,7,8,9%20from%20admin%20union%20select%2 0%20from%20news%20where%2 0 1=2%20and%2 0"=' Get the shell method: In the website...