and repair

Application: YVS Image GalleryAffected Version: 0.0.0.1Developer Website: http://yvs.vacau.com/gallery.htmlTest Platform: Windows, Linux, and UnixDefect type: SQL INJECTIONSExploitation: RemoteAuthor: Corrado Liotta Aka CorryL www.2cto.com corryl80 [

Sina light blog does not strictly filter the URL of the album art when publishing music, leading to cross-site filtering.Detailed description:  When publishing music, Sina light blog normally submits the following request:   However, the screen

Title: Endian UTM Firewall v2.4.x & v2.5.0-Multiple Web VulnerabilitiesOverview:==================Einfach, schnell und zukunftssicher! Die ideale L öhei, um Ihre Filialen und industriellen Zweigstellen rund um den Globus zu sch ützen.Endian 4i ist

1. Storage Type xss caused by insufficient FilteringDetailed description:  Vulnerability proof: arbitrary tags and characters can be inserted hereSolution: filter out tags <> and remove single double quotation marks.2.Blog is a very old program. You

Title: PHP Address Book 6.2.12 Multiple security vulnerabilitiesBy Stefan SchurtzAffected Software: Successfully tested on PHP Address Book 6.2.12Developer Website: http://sourceforge.net/projects/php-addressbook/Defect description===================

Title: OneFileCMS v.1.1.5 Local File compression sion VulnerabilityAuthor: mr. pr0n (@ _ pr0n _)Home: http://ghostinthelab.wordpress.com/-http://s3cure.gr: Https://github.com/rocktronica/OneFileCMSAffected Version: OneFileCMS v.1.1.5Test Platform:

Http://gz.soufun.com/popsite/meilin/shownewsen.asp? Id = 140Data and server information leakage caused by not filtering parametersWe should be able to proceed furtherProof of vulnerability: http://gz.soufun.com/popsite/meilin/shownewsen.asp? Id = 140

Title: Pre Printing Press product_desc.php (pid) SQL Injection VulnerabilityAuthor: Easy LasterBasic: Pre Printing PressPrice: $999Script Writing: PHPStatus: vulnerable| Thanks: secunet. to, 4004-security-project, Team-Internet, HANN! BAL, RBK, Dr.

Multiple SQL injection vulnerabilities in the IT168 substation, SQL Injection also exists in the background login, database structure, background management information leakage, host-related information leakage, resulting in information leakage. The

Brief description: injection may cause leakage of host information and further penetration. The Administrator is expected to fix the issue in time to avoid affecting the host security.Http://rainbowlife.163.com/chxw2.php? ArticleID = 98% 27% 20% 20%

Brief description: The scanning Trojan function is available in the background. You can view the task file source code. Detailed description: Attackers can exploit the injection vulnerability to read database configuration files, such as social

Http://dev.wo.com.cn/bbs/viewthread.jsp? Tid = 46666 & page = 1 & authorid = 1Oracle blind injection...You can use the Forum background for visual testing .. If you continue the visual test, you may want to use webshell ..Unfortunately, blind note ..

Title: Buddypress plugin of Wordpress remote SQL InjectionAuthor: Ivan TerkinType: Remote ExploitVulnerability: Remote SQL InjectionSoftware: buddypress.orgAffected Versions: 1.5.5 and earlierTest Platform: Buddypress 1.5.4  POST/wp-load.php HTTP/1.1

Kingdee Youshang has the SQL injection vulnerability, which allows you to obtain related data tables and records.Proof of vulnerability:Input 1 = 1 to get:Http://store.youshang.com/show.php? Id = 81738% 20and % 201 = 1  Input 1 = 2 to

I upgraded Ubuntu14.04 to the latest 4.0.5 kernel version. I didn't plan to record it, But I encountered some problems during the upgrade, So I recorded it, share it with yuanyou who have encountered the same problem. Go to the official website to

* Session_start ();Header ('content-Type: text/html; charset = UTF-8 ′);// Login verificationInclude_once '../xyconn. php ';If (strtolower ($ _ POST ["checkcode"]) = strtolower ($ _ SESSION ["randval"]) {Unset ($ _ SESSION ["randval"]); // release

Design product: piwioDeveloper: piwio projectAffected Versions: 2.3.3 and earlierTested version: 2.3.3Defect type: Directory Path Traversal, Cross-Site Scripting (XSS)Solution status: officially fixedRisk Level: MediumAdvisory Details: High-Tech

Title: PHP Volunteer Management 'id' 1.0.2 Multiple VulnerabilitiesAuthor: G13 www.2cto.com: Https://sourceforge.net/projects/phpvolunteer/Affected Version: 1.0.2 0x01 description0x02 XSS0x03 SQL Injection0x04 Vendor report ##### 0x01 overview ##### 

1. The internal query interface is not verified and is open anonymously. Http: // 123.126.33.234: 8080/api/statistic/   2. SVN leakage in the internal systemDNS Management System Http: // 123.126.33.236/pages/. svn/entriesVideo Review Management

SQL injection attacks are not effectively prevented. This vulnerability can directly cause leakage of company-related confidential information.Detailed Description: directly submit the SQL injection vulnerability