PT-2018-16931

Name of the Vulnerable Software and Affected Versions DiscuzX version X3.4 Description The issue is related to a XSS problem. It occurs via the appid parameter in a delete action in the includespacecpspacecp space.php file. Recommendations For DiscuzX version X3.4, avoid using the appid parameter...

vbmcms维维招生系统space.php the user parameter sql injection vulnerability

No description provided by source...

Mymps v4.0i /space.php 参数user存在SQL注入

No description provided by source...

UCHOME1. 5 XSS vulnerability-vulnerability warning-the black bar safety net

-------------space.php------------- Test code: you need to first login http://u.discuz.net//home//space.php?scriptalert/hiphop//script/script...

astrospaces-sqlxss.txt

--------------------------------------------------------- Portal Name: AstroSPACES Vendor : http://p3net.net Vulnerable File : space.php Dork: Powered By AstroSPACES Author : PouyaServer , [email protected] Vulnerability : SQL,XSS --------------------------------------------------------- SQL...

Discuz Spache.php注射漏洞

discuz的空间功能 space.php $member = $db-fetchfirst"SELECT m., mf., u.grouptitle, u.type, u.creditshigher, u.creditslower, u.readaccess, u.color AS groupcolor, u.stars AS groupstars, u.allownickname, u.allowuseblog, r.ranktitle, r.color AS rankcolor, r.stars AS rankstars $oltimeadd1 FROM...