SQL injection vulnerability in the background up***.php file of Shield Spirit Original Article Submission System

The Shield Spirit Original Article Submission System is a concise submission system. A SQL injection vulnerability exists in the background up.php file of Shield Spirit Original Article Submission System. An attacker can exploit the vulnerability to obtain sensitive information from the database...

Arbitrary file deletion vulnerability in ECS CMS of Honghu Erchuang Netlink Information Technology Co.

ESPCMS is a free and professional CMS for building enterprise websites. Honghu Erchuang Netlink Information Technology Co., Ltd. ESPCMS arbitrary file deletion vulnerability, attackers can use the vulnerability to intercept and delete upfile under the file packet, rewrite the packet to cause all...

CVE-2018-20528

JEECMS 9 has SSRF via the ueditor/getRemoteImage.jspx upfile parameter...

Onethink Ueditor Server-Side Request Forgery Vulnerability

Onethink is a content management framework for web development based on ThinkPHP.Ueditor is one of the HTML editors. A server-side request forgery vulnerability exists in the getRemoteImage.php file of Ueditor in Onethink version 1.0 and 1.1. A remote attacker can exploit this vulnerability with...

CVE-2017-14323

SSRF Server Side Request Forgery in getRemoteImage.php in Ueditor in Onethink V1.0 and V1.1 allows remote attackers to obtain sensitive information, attack intranet hosts, or possibly trigger remote command execution via the upfile parameter...

File upload vulnerability in semcms shqk_Admin/SEMCMS_Upfile.php file

SemCms is a set of open source foreign trade enterprise website management system, mainly used for foreign trade enterprises, compatible with IE, Firefox and other mainstream browsers.SemCms php version written in php language, combined with apache, in window, or linux system to run. Semcms...

SSRF Vulnerability in Jspxcms Enterprise Open Source Web Content Management System

jspxcms is an open source, Java-based content management system CMS. An SSRF vulnerability exists in the source and upfile parameters of the classes\com\jspxcms\core\web\fore\UploadController.java file in Jspxcms, which allows an attacker to initiate a request to an intranet host to obtain the...

PHP. S3. TO upload the exploit-vulnerability warning-the black bar safety net

PHP S3 upload vulnerability This web-based vulnerability is more serious, can directly access the shell, is given below exploits the method of Vulnerability information: Can any upload the PHP, TXT, JPG, PNG format file change your shell to sh3ll.php.jpg or sh3ll.php%0%0.1.jpg Exploit demo: Use:...

BOSSI company(enterprises)website administrative system thrilling variety of vulnerability-vulnerability warning-the black bar safety net

BOSSI companyenterpriseswebsite administrative system thrilling variety of vulnerabilities Vulnerability: injection vulnerability Vulnerability page: NewsInfo. asp, Vulnerability code: if not isEmptyrequest. QueryString"id" then id=request. QueryString"id" else id=1 end if Set rs = Server...

PHPOK3 business website built Station program injection-vulnerability warning-the black bar safety net

Author: jsbug original: http://lcx.cc/?FoxNews=1077.html Friends always stepping on my body to embark on DOTA Super God of the road, see the forum someone said phpok, taking advantage of the weekend, send on the head a gold, hope you can also be super-God. “phpok3/app/www/models/upfile.php”: the...

An electronic network Cms 0DAY-vulnerability warning-the black bar safety net

Night bored, come up with a Shell, flipped, found a new it. Don't know which home system, then Google a bit. Discover seems to be what is called an electronic website system. The main vulnerability is still that dynamic shopping upload, for a while it got more than a dozen Shell, including a...

South data get shell summary-vulnerability warning-the black bar safety net

By upfileother. asp vulnerability file taken directly SHELL Directly open userreg. asp for registered members, log in not logged state, use local Upload File Upload code is as follows: HTMLHEAD META http-equiv=Content-Type content="text/html; charset=gb2312" STYLE type=text/cssBODY FONT-SIZE: 9pt...