Shenzhen College of Information Technology V3. 0 injection vulnerability-vulnerability warning-the black bar safety net

Publishing author: xiaokis Affected version: V3. 0 Vulnerability type: SQL injection Vulnerability description: File: the newss. asp % on error resume next sql="update news set hits=hits+1 where id="&cstrrequest"id" conn. execute sql set rs=server. createobject"adodb. recordset" sql="select from...

Rain Joe(YuQa)Network Information feedback system YuQaIFS V1. 0 vulnerability 0day and fix-vulnerability warning-the black bar safety net

Publishing author: f4tb0y Affected versions: YuQaIFS V1. 0 Vulnerability type: design flaw Vulnerability Description: a vulnerability in the file is YuQaIFSSave. the asp directly to the submitted data is written to the database, without any filtering. 主页 面 www.xxx.com/xx/index.asp（xx for this...

Ganji is a SQL injection BUG and solution-vulnerability warning-the black bar safety net

| Detail: To unsubscribe from there. $. post'/event/cancelSmsNotify/' , phone : "sdf'dsf" , functionret alert'unsubscribe successful'; Injection parameters phone Vulnerabilityproof: phone=sdf'dsf br / bFatal error/b: Uncaught exception 'Exception' with message '1 0 6 4: You have an error in your...

EasyTalk microblogging local file inclusion vulnerability-vulnerability warning-the black bar safety net

Release date: 2011-01. 2 9 Publishing author: sw0rder Affected versions: EasyTalk Official website: Vulnerability type: a file that contains Vulnerability description: Vulnerability file in“wap/index.php”,the key code is as follows: ? php errorreporting7; define'INET', TRUE;...

EimsCms v5. 0 XSS+CSRF=GetShell-a vulnerability warning-the black bar safety net

| EimsCms v5. 0 XSS+CSRF=GetShell 作者 :B0mbErM@n Time:2011-01-28 ------ GetShell----- 1 in the Book. asp the mailbox at the fill in the word,submission 2 in the Book. the asp mailbox fillXSSstatement in the CSRF 3 wait for the administrator to triggerXSSstatement,and then words connected to the...

Ganji is a SQL injection BUG and solution-vulnerability warning-the black bar safety net

| Detail: To unsubscribe from there. $. post'/event/cancelSmsNotify/' , phone : "sdf'dsf" , functionret alert'unsubscribe successful'; Injection parameters phone Vulnerabilityproof: phone=sdf'dsf br / bFatal error/b: Uncaught exception 'Exception' with message '1 0 6 4: You have an error in your...

DEDECMS exploit 0day a gold-bug warning-the black bar safety net

Published author: the mind Affected versions: dedecms Official website: http://www.dedecms.com Vulnerability type: design error Vulnerability description: Vulnerability code: member\indexdo.php else if$fmdo=='login' // http://127.0.0.1/member/indexdo.php?fmdo=login&dopost=login came to this step...

HDWiKi V 5.0 local include vulnerability 0Day-vulnerability warning-the black bar safety net

Release date: 2011-01. 2 3 Publishing author: HYrz Affected versions: HDWiKi V 5.0 Official website: http://kaiyuan.hudong.com Vulnerability type: a file that contains Vulnerability description: From the source code see there is indeed a problem,we just Upload a picture of the Trojan can be norma...

Journal newspaper system Fckeditor-0day-vulnerability warning-the black bar safety net

Published author: love letters Affected versions: JournalX 2.0 Official website: PRODUCT DESCRIPTION: JournalX 2.0 first for Publishing/Group, Journal of Industry, introduced the overall solution. There are already in all over the country 6 0 0 more than magazine, more than a dozen publishers...

CVE-2011-0640

The default configuration of udev on Linux does not warn the user before enabling additional Human Interface Device HID functionality over USB, which allows user-assisted attackers to execute arbitrary programs via crafted USB data, as demonstrated by keyboard and mouse data sent by malware on a...

Hua-speed online trading platform V13 full version more than the presence of injection vulnerabilities-vulnerability warning-the black bar safety net

Publishing author: wandering wind Affected versions: V13 Official website: http://www.hs173.cn Vulnerability type: SQL injection Vulnerability Description: The program is also the only anti-get and post two kinds of injection, then we can use the cookie injection, get admin username and password...

phpcms V9 BLind SQL injection vulnerability 0day-vulnerability warning-the black bar safety net

Release date: 2011-01. 2 3 Publishing author: eidelweiss Affected versions: phpcms v9 blind Official website: http://www.phpcms.cn Vulnerability type: SQL injection Vulnerability description: phpcms v9 blind parameter filter existsSQL injectionvulnerabilities. google dork:inurl:"index. php?...

phpcms 2 0 0 8 V2 injection vulnerability 0day analysis-vulnerability warning-the black bar safety net

Release date: 2011-01. 2 2 Publishing author: xhm1n9 Affected versions: Phpcms 2 0 0 8 V2 Official website: Vulnerability type: SQL injection Vulnerability description: 根目录下flashupload.php file$modelid useless in single quotation marks protection, the front is also missing the filter, the presenc...

HDWiKi V 5.0 local contains 0Day-vulnerability warning-the black bar safety net

| 漏洞 文件 :\install\install.php Key code: ? php errorreportingEERROR | EWARNING | EPARSE; define'INHDWIKI', TRUE; define'HDWIKIROOT', '../'; $langname=$COOKIE'langname';/langname without any filter,direct from the Cookies deposited in langname/ ifisset$REQUEST'lang' / Detect whether the variable is...

6CMS enterprise website management system(The English fan trilingual Edition) sql injection vulnerability-vulnerability warning-the black bar safety net

| g. cn keyword: 6CMS enterprise hope Station management systemEnglish fan trilingual Edition Default account password: admin Background: admin/ Also don't know programmer How do I see the program in the admin directory there is a anti-injection sql. asp But the parent directory was not Default...

Hackers Steal $ 150,000 Malware Job Search !

Small businesses are worried about a new scam: criminals in search of work who want to break into online bank accounts. The U.S. Federal Bureau of Investigation issued a warning Wednesday on a new version of a fraud technique called long-term computer automated information exchange fraud. With AC...

GOOGLE BOOK the MHTML Protocol injection-XSS vulnerability-vulnerability warning-the black bar safety net

Brief description: GOOGLE BOOK search output gaps, by the MHTML Protocol injection script code to run, resulting in aXSSvulnerabilities. Non-original, forwarded from the white hat group system32 total. Detailed description: Vulnerability to prove: mhtml:http://www. google. com/books?...

Million network the Main Station due to filter poor lead to cross-site multi-use vulnerability-vulnerabilities and early warning-the black bar safety net

Brief description: The Main Station is due to submit content security checks generated by the vulnerability Detailed description: http://www.hichina.com/hasclient/whois1.asp?tongyong=yes&domain=xxx&code=0 0 0 0 Modify the three variables in any one place for' Since the Universal network of securi...

N - 1 3 news 3.4 remote admin add CSRF vulnerability-vulnerability warning-the black bar safety net

EXP: the html head titleRemote Admin Add CSRF Exploit/title /head H2Remote Admin Add CSRF Exploit by qing-Edit/H2 formmethod="POST"name="form0"action="http://localhost/news/admin.php?action=options&mod=accounts&create=new" inputtype="hidden"name="accountname"value="admin" /...

TinyBB 1.2 script injection vulnerability-vulnerability warning-the black bar safety net

Author: Aodrulez Test environment: Ubuntu 10.04 In GOOGLE direct search: TinyBB 2 0 1 1 all rights reserved to search for such sites Use http://. org/index. php? page=profile&id=' or 'a'='a Contact the author: [email protected]...