ECShop 2.7.2 API 盲注漏洞

简要描述： 该漏洞已经过本人测试存在。在服务器关闭魔法引号的情况下可以盲注，不受ECShop内核过滤影响。这次不坑爹了 问题文件在/api/client/api.php 利用方法为POST 详细说明： /api/client/api.php 第7行 dispatch$POST; /api/client/includes/libapi.php 6 -10 行 $funcarr = array'GetDomain', 'UserLogin', 'AddCategory', 'AddBrand', 'AddGoods', 'GetCategory', 'GetBrand', 'GetGoods...

OTRS Information Disclosure Vulnerability (Mar 2011)

Open Ticket Request System OTRS is prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CVE-2011-1433

The 1 AgentInterface and 2 CustomerInterface components in Open Ticket Request System OTRS before 3.0.6 place cleartext credentials into the session data in the database, which makes it easier for context-dependent attackers to obtain sensitive information by reading the UserLogin and UserPW fiel...

BeeSns microblogging system V0. 2 elevation of Privilege oday+exp and fix-vulnerability warning-the black bar safety net

| Publishing author: sub-meter Affected versions: BeeSns V0. 2 Official address: Vulnerabilitydescription: IP filter is not strict,causing the user can submit malicious parameters to enhance their own privileges This microblogging system style nice, personally prefer, the look code is found some...

DEBIAN-CVE-2010-1648

Cross-site request forgery CSRF vulnerability in the login interface in MediaWiki 1.15 before 1.15.4 and 1.16 before 1.16 beta 3 allows remote attackers to hijack the authentication of users for requests that 1 create accounts or 2 reset passwords, related to the Special:Userlogin form...

CVE-2010-1097

include/userlogin.class.php in DeDeCMS 5.5 GBK, when session.autostart is enabled, allows remote attackers to bypass authentication and gain administrative access via a value of 1 for the SESSIONdedeadminid parameter, as demonstrated by a request to uploads/include/dialog/selectsoftpost.php...

CVE-2010-1097

CVE-2010-1097 affects DeDeCMS 5.5 GBK, where enabling session.auto_start allows remote attackers to bypass authentication and gain administrative access by setting _SESSION[dede_admin_id] to 1, demonstrated via uploads/include/dialog/select_soft_post.php. The vulnerability stems from improper ses...

osDate Remote File Inclusion

======================================================================================== o osDate Remote File Inclusion Vulnerabilities Software : osDate dating and matchmaking script version 2.1.9 mostly affected Vendor : http://www.tufat.com/ Download : http://www.tufat.com/sfreedatingsystem.ht...

osDate 2.1.9 - Remote File Inclusion

======================================================================================== o osDate Remote File Inclusion Vulnerabilities Software : osDate dating and matchmaking script version 2.1.9 mostly affected Vendor : http://www.tufat.com/ Download : http://www.tufat.com/sfreedatingsystem.ht...

Zen Tracking 2.2 - Authentication Bypass

Zen Tracking + Download : http://scripts.ringsworld.com/calendars/zentimetracking/ + Vuln Code : userlogin.php if !empty$POST'password' $username =$POST'username'; $password =$POST'password'; dbConnect; $result1 = mysqlquery"select from ".$tbluser." where username='". $username ."' and...

Power System Of Article Management 3.0 - File Disclosure / Cross-Site Scripting

--------------------------------------------------------- Portal Name: Power System Of Article Management Version : 3.0 Author : PouyaServer , [email protected] Vulnerability : DD/XSS --------------------------------------------------------- DD:...

rpgboard-sql.txt

RPG.Board = 0.0.8Beta2 Remote SQL Injection Author: 0x90 HomePage: www.0x90.com.ar Contact: Gunsat0x90dotcomdotar Script: RPG.Board site: http://rpgmaster.de/viewtopic.php?f=25&t=69 Vulnerability Class: SQL Injection Exploit: Register, login and testing exploit...

RPG.Board 0.0.8Beta2 - showtopic SQL Injection

RPG.Board 0.0.8Beta2 - showtopic SQL Injection / \ /\ /\ / \ / \ / | / \ / / \ / \ / | | | | | \ / / ||| | | | | | | | | | | | | / | | || | |||| | | | | \ / \ | | | | | | | | | | | | | | | | | | \ | || | / \ | | | || |/| | | || | | | | |/| | | | | |\ \ / / /\ \ |/ //| / || ||/|| || || |...

CVE-2007-6338

SQL injection vulnerability in userlogin.jsp in Trivantis CourseMill Enterprise Learning Management System 4.1 SP4 allows remote attackers to execute arbitrary SQL commands via the user parameter username field. NOTE: some of these details are obtained from third party information...

CVE-2006-6090

Multiple SQL injection vulnerabilities in BaalAsp forum allow remote attackers to execute arbitrary SQL commands via the 1 password parameter to a adminlogin.asp, the 2 name or 3 password parameter to b userlogin.asp, or the 3 search parameter to search.asp...

CVE-2005-1745

The UserLogin control in BEA WebLogic Portal 8.1 through Service Pack 3 prints the password to standard output when an incorrect login attempt is made, which could make it easier for attackers to guess the correct password...

CVE-2005-1745

The CVE-2005-1745 entry concerns BEA WebLogic Portal 8.1 with Service Pack 0?3 (Portal 8.1 SP3) where the UserLogin control prints the password to standard output after an incorrect login attempt. Affected component: BEA WebLogic Portal 8.1 (UserLogin control). Root cause: password leakage via st...

CVE-2005-1745

The UserLogin control in BEA WebLogic Portal 8.1 through Service Pack 3 prints the password to standard output when an incorrect login attempt is made, which could make it easier for attackers to guess the correct password...

CVE-2004-1938

SQL injection vulnerability in userlogin.php in Phorum 3.4.7 allows remote attackers to execute arbitrary SQL commands via doubly hex-encoded characters such as "%2527", which is translated to "'", as demonstrated using the phorumuriauth parameter to list.php...