Zoomla x1.5 /ftb.imagegallery.aspx 任意文件删除漏洞

No description provided by source...

Discuz x1. 5 to steal any of the user cookie-vulnerability warning-the black bar safety net

Just submitted 3 6 0 did not pass. And then I'll blog publishing. ! ! ! ! ! ! That is so, thank you all. Reprint please indicate the...

Discuz! x1.5 api-trade-notify-credit.php sql注入漏洞

No description provided by source...

Discuz! x1.5 api-manyou-my.php 文件上传漏洞

在my.php中，首选创建一个继承Manyou的类My，然后创建一个My的实例，接着调用Manyou父类的run函数，我们跟进run函数查看： 在run函数中，程序会调用processServerRequest对提交的参数进行处理，而该函数会获取客户端POST提交的参数，根据提交的参数获取相应的扩展接口， 而在my.php文件中的onVideoAuthAuth的函数中，由于没有对文件的扩展名进行判断，因此我们可以直接构造php一句话，利用该函数写入一句话木马，因此这样我们需要提交的参数构造如下： 构造的UploadExp： $module = ‘video’;...

discuz! X1.5 Get Shell 0day

No description provided by source. ?php printr' +---------------------------------------------------------------------------+ Discuz! X1-1.5 notifycredit.php Blind SQL injection exploit by toby57 2010.11.05 mail: admin at bkey org team: http://www.bkey.org 说明:alibaba把后续getshell代码添加了下去...

Discuz X1-x1. 5 Blind SQL injection Getshell Xday-vulnerability warning-the black bar safety net

? php printr' +---------------------------------------------------------------------------+ Discuz! X1-1.5 notifycredit.php Blind SQL injection exploit by toby57 2010.11.05 mail: toby57 at 1 6 3 dot com team: http://www.wolvez.org...

DZ-X1. 5 Forum latest backstage get WebShell-vulnerability warning-the black bar safety net

Discuz! X is Kang Sheng Chong want Comsenz launch of a community-based professional jianzhan platform, Forum, BBS, the personal space of SNS, the portal（Portal）, group Group, application of open platform the Open Platform for full integration in one, help website realize one-stop service. Look...

DISCUZ X1. 5 vulnerability-vulnerability warning-the black bar safety net

DISCUZ X1. 5 local file inclusion vulnerability Affected versions: DISCUZ X1. 5 other version unknown Vulnerability type: local file inclusion vulnerability Vulnerability analysis: DISCUZX1. 5 local file inclusion, of course, is conditional, is to use a file as a cache. configglobal.php...

discuz x1.5 discuz 7.2 后台getshell 0day通杀版

简要描述： xml过滤不严导致漏洞产生 详细说明： 方法为： 后台：插件--添加插件--请选择导入方式:上传本帖附件中的XML文件 并同时勾选上 允许导入不同版本 Discuz! 的插件易产生错误!! 然后确认 不懂的可以看演示动画。。 shell地址就为：data/plugindata/shell.lang.php discuz x1.5 shell地址就为：data/plugin/data/shell.lang.php discuz 7.2 漏洞证明：...