bo-blog任意变量覆盖漏洞

// go.php $qurl=$SERVER"REQUESTURI"; @list$relativePath, $rawURL=@explode'/go.php/', $qurl; $rewritedURL=$rawURL; // 来自$SERVER"REQUESTURI",可以任意提交的: ... $RewriteRules="/component/^/+/?/"; // 这个正则限制的不够细致,可以很轻易的绕过: ... $RedirectTo="page.php?pagealias=\1"; $i=0; foreach $RewriteRules as $rule if...

WordPress Plugin WP-Syntax 0.9.1 - Remote Command Execution

WordPress Plugin WP-Syntax 0.9.1 - Remote Command Execution ============================================================ Wordpress Plugin WP-Syntax Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 0...

Podcast Generator <= 1.2 unauthorized Re-Installation Remote Exploit

Exploit for unknown platform in category web applications ==================================================================== Podcast Generator $file.$ext $Ldeleted"; / Explanation code snippet above points ----------------------------------------------------------------------------------- 1...

WordPress wp-trackback. php vulnerability analysis-vulnerability warning-the black bar safety net

WordPress wp-trackback. php vulnerability analysis Text/Superhei 2007/1/9 1. Stefan Esser, a large cattle 2 0 0 7/0 1/0 5 publish a WordPress Trackback Charset Decoding SQL Injection Vulnerability 1 Code:wp-trackback.php $tburl = $POST'url'; $title = $POST'title'; $excerpt = $POST'excerpt';...

CVE-2005-4686

PunBB 1.2.9 (often with F-ART BLOG:CMS) includes config.php before calling unregister_globals, enabling exposure of unspecified sensitive information. Root cause: premature/configuration sequencing in the initialization flow. Impact is limited to information disclosure; no explicit vector or expl...

CVE-2005-4686

PunBB 1.2.9, when used alone or with F-ART BLOG:CMS, includes config.php before calling the unregisterglobals function, which allows attackers to obtain unspecified sensitive information...

CVE-2005-4686

PunBB 1.2.9, when used alone or with F-ART BLOG:CMS, includes config.php before calling the unregisterglobals function, which allows attackers to obtain unspecified sensitive information...