56796 matches found
华夏创新智能加速路由器 /acc/bindipmac/static_arp_list_action.php 等文件 任意命令执行漏洞
No description provided by source...
用友PDM Professional-Jboss配置不当导致代码执行
No description provided by source...
WordPress WP User Frontend插件3.4.6文件上传漏洞
No description provided by source...
用友NC综合办公系统 /service/~iufo/com.ufida.web.action.ActionServlet 用户信息泄露
No description provided by source...
用友的优普U8系统 /Server/CmxUser.php sql盲注
No description provided by source...
施耐德 Modicon M340 PLC Web登录验证栈溢出漏洞
No description provided by source...
DuomiCms多处SQL注入
No description provided by source...
FineCMS企业最新版本后台post SQL注入漏洞
No description provided by source...
phpshe v1.1 index.php存在本地包含漏洞可getshell
No description provided by source...
phpmywind admin路径下多处sql注入
No description provided by source...
phpmywind admin/infoclass_save.php第二处sql注入
No description provided by source...
phpmywind /admin/paymode_save.php sql注入
No description provided by source...
wordpress 插件 site-import V1.0.1 文件包含漏洞
No description provided by source...
Libsys图书管理系统/include/config.properties 信息泄漏
No description provided by source...
cisco统一计算系统管理器UCS Manager 2.11b Shellshock
No description provided by source...
WordPress Bulk Delete Plugin 5.5.3 - 提权
No description provided by source...
ThinkPHP 模板常量__SELF__ XSS漏洞
No description provided by source...
蝉知企业门户 control.php 任意文件读取漏洞
No description provided by source...
科创CMS /cms/voteManager/voteaction.jsp 通用型Oracle注入
No description provided by source...
Shop7z v2.9 showmessage.asp 文件 id 参数SQL注入漏洞
No description provided by source...
BlueCMS v1.6 sp1 /admin/login.php SQL注入漏洞
No description provided by source...
齐博CMS考试系统 exam_order.php 参数and SQL注入漏洞
No description provided by source...
逐浪CMS v2.4 UploadHandler.ashx 任意文件上传漏洞
No description provided by source...
EduWind在线教育建站系统 groupindexcategory 参数categoryId SQL注入漏洞
No description provided by source...
天空教室精品系统 /sc8/coursefiledownload 参数 filepath 任意文件下载漏洞
No description provided by source...
AnyMacro邮件系统 webmailgo.php 存储xss漏洞
No description provided by source...
LZXSZXYXT乐知行数字校园系统 /oa/calendar/exportExcel.do等5处 SQL注入漏洞
No description provided by source...
yershop多用户商城系统 Driver.class.php等多处SQL注入漏洞
0x01漏洞简介 yershop是采用thinkphp框架开发的一套商城系统。其在以下3处存在SQL注入漏洞： 1Driver.class.php 可以通过以下的payload进行注入： index.php?c=Article&a=index&category0==1 or updatexml1,concat1,select concatuser,1,version,1%23in&category1=xxxx 2TuanController.class.php 可以通过以下的payload进行注入： /index.php?c=Tuan&a=category&id0==1 or...
Timber E-learning在线培训系统政府版/Web/New.aspx 等9处 SQL注入漏洞
No description provided by source...
泛微E-office /E-mobile/flowsorce_page.php等20处 SQL注入漏洞
0x01漏洞简介 泛微E-office在以下20处存在SQL注入漏洞 1/E-mobile/flowdopage.php?diff=delete&RUNID=1 //参数RUNID 2/E-mobile/flowdopage.php?diff=delete&flowid=1 //参数flowid 3/E-mobile/flowsorcepage.php?flowid=2 4/E-mobile/flownextpage.php?diff=candeal&detailid=2 5/E-mobile/flowimagepage.php?FLOWID=2...
天空教室精品系统 /sc8/page/schoolspace/course/academycourse-view.do等4处 SQL注入漏洞
No description provided by source...
cmseasy 5.6 index.php 网站路径泄露漏洞
No description provided by source...
盈世Coremail XT3.0版 发件人地址处 存储型XSS
No description provided by source...
E-TILLER期刊采编系统/ch/reader/wait_published_articles.aspx等8处 POST注入漏洞
No description provided by source...
Timber E-learning在线考试系统商业版 /Web/User_Sort_List.aspx等8处 SQL注入漏洞
No description provided by source...
Timber E-learning在线考试系统后台 /Paper/Paper_Manage.aspx 等13处 SQL注入漏洞
No description provided by source...
EduWind在线教育建站系统 MeController.php 逻辑漏洞可导致上传shell
No description provided by source...
方维O2O系统 后台越权漏洞泄露用户详细地址
No description provided by source...
科创CMS addLinks_do.jsp 参数siteid SQL注入漏洞
No description provided by source...
Nongyou政务系统 hnzc.aspx 参数CountryName SQL注入漏洞
0x01漏洞简介 Nongyou政务系统采用的ASPX+MYSQL架构，其在/hnzc.aspx处的参数CountryName注入漏洞，远程攻击者可以结合回显报错的方式执行SQL指令。 0x02漏洞详情 山东农友软件公司开发的农业监管系统存在一处SQL注入 我就只演示1个站了 ...:8200/hnzc.aspx?CountryName=%e6%96%87%e7%99%bb%e5%b8%82&level=1 0x03修复方案 过滤。...
Libsys图书管理系统 book_rank.php 参数cls_no SQL注入漏洞
No description provided by source...
用友优普U8系统 /Server/CmxGetAppNameByUserName.php等2处 SQL注入漏洞
0x01漏洞简介 用友优普U8系统在以下2处存在SQL注入漏洞： 1/Server/CmxGetAppNameByUserName.php 参数User 2/Server/CmxCS.php 参数pgid 远程攻击者无需登陆，可以利用该漏洞执行SQL指令。 0x02漏洞利用 1sql注入1 sqlmap.py -u "...:8080/Server/CmxCS.php?pgid=CSRemove" --dbms mysql --technique T --cookie "RASAdminUserInfoUserName=1" --data "CSID=1&CSID=1" -p CSID ...
上海天柏在线培训系统 /WebPage/Paying.aspx 等11处 SQL注入漏洞
No description provided by source...
ILASIII 数字化图书管理系统 RdrRInforDetail.aspx 参数Name SQL注入漏洞
No description provided by source...
Nongyou政务系统 cwgkview.aspx 参数 tname SQL注入漏洞
No description provided by source...
Nongyou政务系统/newsymItemView/DynamicItemView.aspx等2处 SQL注入漏洞
No description provided by source...
TodayMail邮箱系统 邮件标题和正文 存储XSS
No description provided by source...
Mao10cms v3.5.2 /theme/default/public/head-uesr.php等5处 SQL注入漏洞
No description provided by source...