CVE-2014-4030

creationtimestamp| type| source ---|---|--- 2014-06-10 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/39212...

lianzhi_cms /getFile.jsp 任意文件下载漏洞

No description provided by source...

NS_ASG 6.3 /debug/show_logfile.php 任意文件下载漏洞

No description provided by source...

CVE-2014-3866

creationtimestamp| type| source ---|---|--- 2014-05-25 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/39198...

CVE-2014-3935

creationtimestamp| type| source ---|---|--- 2014-05-19 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/39188...

CVE-2014-3212

creationtimestamp| type| source ---|---|--- 2014-05-16 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/39181...

CVE-2014-3442

creationtimestamp| type| source ---|---|--- 2014-05-16 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/39180...

大汉版通系统任意文件上传/删除漏洞

简要描述： 大汉版通某系统存在多处任意文件上传/删除漏洞 详细说明： 一、漏洞代码 文件上传： 漏洞一：/xxgk/jcmsfiles/jcms1/web1/site/zfxxgk/ysqgk/attachupload.jsp 漏洞二：/xxgk/jcmsfiles/jcms1/web1/site/zfxxgk/ysqgk/applyattachupload.jsp 文件删除： 上述两个文件同时存在任意文件删除漏洞 先来看任意文件删除的代码： if"D".equalsstrBillStatus delFileName =...

Dompdf 0.6 /dompdf.php 任意文件下载漏洞

No description provided by source...

PTCeffect 4.6 - Local File Inclusion / SQL Injection

Exploit Title: PTCeffect LFI & SQL Injection Vulnerabilities Google Dork: find it : Date: 2014-04-19 Exploit Author: Walidz Software Link: http://www.ptceffect.com/ Version: 4.6 Tested on: windows,linux,mac os CVE : N/A The LFI vulnerability is in index.php...

CMSimple 4.44.4.2 - Remote File Inclusion

CMSimple 4.44.4.2 - Remote File Inclusion ============================================================================================================= o CMSimple - Open Source CMS with no database = Remote File Inclusion Vulnerability Software : CMSimple - Open Source CMS with no database Versio...

CVE-2014-3146

creationtimestamp| type| source ---|---|--- 2014-04-15 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/39155...

SFR Box NB6多个跨站脚本漏洞

CVE ID:CVE-2014-1599 SFR Box NB6是一款路由器设备。 通过/network/dns, /network/dhcp, /network/nat, /network/route, /network/lan和/wifi/config传递的输入在返回用户之前缺少过滤，允许远程攻击者利用漏洞注入恶意脚本或HTML代码，当恶意数据被查看时，可获取敏感信息或劫持用户会话。 0 SFR Box NB6 目前没有详细解决方案：...

CVE-2013-7196

creationtimestamp| type| source ---|---|--- 2014-04-05 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/39139...

innoEDIT 'innoedit.cgi'远程命令执行漏洞

Bugtraq ID:66367 innoEDIT是一款基于WEB的应用。 innoEDIT 'innoedit.cgi'不正确处理提交给'download'参数的数据，允许远程攻击者利用漏洞提交特殊shell元字符，可以WEB权限执行任意命令。 0 innoEDIT 6.2 目前没有详细解决方案提供： http://www.inno.com.mx/innoedit.htm http://www.mtyjet.com/innoedit/innoedit.cgi?download=;id|...

CVE-2013-7346

creationtimestamp| type| source ---|---|--- 2014-03-24 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/39136...

TaoCMS 2.5 /index.php SQL注入漏洞

No description provided by source...

CVE-2013-5954

creationtimestamp| type| source ---|---|--- 2014-03-15 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/39117...

CVE-2014-2069

creationtimestamp| type| source ---|---|--- 2014-02-22 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/39106...

EasyTalk SQL注入导致后台登录绕过

简要描述： EasyTalk SQL注入导致后台登录绕过 详细说明： 漏洞存在文件：/Admin/Lib/Action/LoginAction.class.php： public function dologin parent::toadmin; $username=$POST'username'; $password=$POST'password'; $authcode=trim$POST'authcode'; if !$username || !$password || !$authcode || $authcode!=$SESSION'authcode'...