phpyun_v4.0.0625最新版注入（可获取部分数据）

简要描述： RT 详细说明： 出现在wap\member\model\index.class.php中 function rinfoaction if$GET'type'&&intval$GET'id' $nid=$this-obj-DBdeleteall"resume".$GET'type',"eid='".int$GET'eid'."' and id='".int$GET'id'."' and uid='".$this-uid."'"; if$nid $url=$GET'type';...

Web Application Protection - Tool to detect and correct vulnerabilities in PHP web applications

WAP 2.0 is a source code static analysis and data mining tool to detect and correct input validation vulnerabilities in web applications written in PHP version 4.0 or higher and with a low rate of false positives. WAP detects and corrects the following vulnerabilities: SQL Injection SQLI Cross-si...

Mobile Carrier Controls Exploitable on a Massive Scale

LAS VEGAS – Device manufacturers and service providers quietly maintain a pervasive level of remote control over the devices they sell to consumers so they can push over-the-air OTA updates for a variety of reasons, but problematically one popular product that enables this type of control is poor...

WAP Proof 2008 Denial of Service

No description provided by source. Description : WAP Proof is an universal emulator of a WAP browser for Microsoft Windows. It is designed for the preview and debugging of mobile websites and provide support for WML, XHTML, cHTML and HTML pages and a compatible GSM modems, such as Wavecom, Alcate...

AlmondSoft Classifieds Pro gmap.php addr Parameter XSS

No description provided by source. source: http://www.securityfocus.com/bid/35816/info AlmondSoft Almond Classifieds is prone to an SQL-injection vulnerability and multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues...

Harris WapChat 1 - Multiple Remote File Inclusion Vulnerabilities

No description provided by source. +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Scripts : Harris Wap Chat Discovered By : k1n9k0ng Scripts site : http://www.successkid.com/ Download Script : http://www.successkid.com/blogs/?p=2 Thanks To :...

Sitecom routers predictable WAP key

Default WAP key can be computed from device MAC address...

BIWEB门户版Getwebshell漏洞

简要描述： 厂商来不来？ 详细说明： wap/detail.php（还有好几处，修复时请留意） if !empty$GET'mod' $strModuleID = strval$GET'mod'; //此处未过滤 includeonce'../'.$strModuleID.'/config/var.inc.php'; //包含需截断 $objWebInit-setDBG$arrGPdoDB; $objWebInit-db; $arrLink = 'mod=' . $strModuleID; else includeonce'include/title.php';...

Espcms wap 模块SQL注入漏洞

变量的传递过程是$SERVER'QUERYSTRING'-$urlcode-$output-$value-$dbwhere-$sql-mysqlquery，整个过程无过滤导致了注入的发生。 正因为变量是从$SERVER'QUERYSTRING'中去取的，所以正好避开了程序的过滤。 而注入的变量是数组的值，并非数组的key，所以也没过被过滤，综合起来形成了一个比较少见的SQL注入。 在/interface/3gwapsearch.php文件的inresult函数中: codefunction inresult...

Espcms wap module SQL injection vulnerability and the use of the EXP-bug warning-the black bar safety net

Variables of the transfer process is$SERVER'QUERYSTRING'-$urlcode-$output-$value-$dbwhere-$sql-mysqlquery, the whole process without filtration led to the implantation occurs. Because of the variable from the$SERVER'QUERYSTRING'to fetch, so just avoid the application of the filter. And the inject...

espcms wap module search SQL injection-vulnerability warning-the black bar safety net

0×0 vulnerability overview 0×1 vulnerability details 0×2 PoC 0×0 vulnerability overview Easy to think ESPCMS enterprise website management system based on LAMP development to build enterprise website management system, it has simple operation, powerful function, good stability, scalability and...

ecshop最新版本几处用户权限越权(其它版本亦可)

简要描述： 就是可以帮助管理员管理订单啥的，匿名活雷锋呐～ 详细说明： 当开启WAP功能手机商城时，未登录可对其它用户订单操作：查看非注册用户订单、取消任意用户订单、任意用户订单确认收货等。 漏洞存在于 /mobile/user.php 页面 1.查看非注册用户订单 elseif $act == 'orderlist' // /mobile/user.php 49行起 $recordcount = $db-getOne"SELECT COUNT FROM " .$ecs-table'orderinfo'. " WHERE userid = $SESSION'userid'";...

科讯 6.x~8.x getshell 0day

简要描述： 未对提交参数判断，导致可以写任意文件到服务器上... 详细说明： Wap/Plus/PhotoVote.asp 14 - 23 Dim KS:Set KS=New PublicCls Dim ID:ID = ReplaceKS.S"ID"," ","" Dim ChannelID:ChannelID=KS.G"ChannelID" If ChannelID="" Then ChannelID=2 If KS.G"LocalFileName""" And KS.G"RemoteFileUrl""" Then If...

kesioncms 4. x-8. x-chicken-wap-column directory+getshell 0day-vulnerability warning-the black bar safety net

The need to open the wap module supports turned on by default, but the wap module database connection file is different from the reception database connection file, so only support normal open through the wap to the station,so a little tasteless nature, the door subscriber station will generally...

ThinkSNS再来一枚sql注入漏洞

简要描述： 还是为了答谢你们送的水杯。 严重的sql注入 可爆任意密码 你懂的！ xss那就不用说了 详细说明： wap模块的搜索没有对关键字过滤 知道表名即可估计 好在我不知道官网的表名。只有本地测试了 漏洞证明： http://========/index.php?app=wap&mod=Index&act=doSearch 关键字输入 1' and 1=2 union select 1,2,3,password,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20 from cqquser where uid=1 and 1='1...

PHPCMS V9 WAP module injection vulnerability-vulnerability warning-the black bar safety net

Used to urldecode a variable into the library before there is no effective filter, resulting in the injected generation. Detailed description: ! Vulnerability to prove: File location:/phpcms/modules/wap/index.php Vulnerability function: commentlist Unfiltered parameter:$GET'commentid' Trigger...

CVE-2012-3148

Unspecified vulnerability in the Oracle Field Service component in Oracle E-Business Suite 12.1.3 allows remote authenticated users to affect integrity, related to Wireless/WAP upload...

Design/Logic Flaw

Unspecified vulnerability in the Oracle Field Service component in Oracle E-Business Suite 12.1.3 allows remote authenticated users to affect integrity, related to Wireless/WAP upload...

CVE-2012-3148

Unspecified vulnerability in the Oracle Field Service component in Oracle E-Business Suite 12.1.3 allows remote authenticated users to affect integrity, related to Wireless/WAP upload...

WAP Proof 2008 Denial of Service

Exploit for windows platform in category dos / poc WAP Proof 2008 Denial of Service Description : WAP Proof is an universal emulator of a WAP browser for Microsoft Windows. It is designed for the preview and debugging of mobile websites and provide support for WML, XHTML, cHTML and HTML pages and...