vulnerability database

Recently, the sebug reported that Drupal7.x has a PHP code execution vulnerability, but no one has analyzed it, so I had to write down the source code myself. I learned the cause of the vulnerability from the blog of the security researcher on the official website. I feel that this issue is a bit of a title. This vulnerability is just a reinstallation

or FTP), but more often, people are using unsecured versions of these protocols. Some protocols, such as the mSQL database service, provide virtually no validation mechanism. It's a good idea for Web administrators to from outside the company and test and simulate attacks on their own websites to see what happens. Some services have been started in the default configuration after machine installation, or some services have been started due to inst

My personal mailbox many times received cosmetics advertising mail, it does not feel like a poison, so point open connection to see, originally is a Sales cosmetics business website. Look prettier, just don't know how safe it is? Previously noted Providence Business Network, but this stranger, I do not know what the system (as shown in Figure 1). Figure 1 Habitually to see whether there is no upload, incredibly did not find any upload pictures or other Dongdong place. Do not forget, register

first, the steps of SQL injectionA) to find injection points (such as: Login interface, message board, etc.)b) The user constructs the SQL statement (for example: ' or 1=1#, which is explained later)c) Send SQL statements to the database management system (DBMS)D) The DBMS receives the request and interprets the request as a machine code instruction to perform the necessary access operationse) The DBMS accepts the returned result and processes it back

run in any setting status on the server. You can use get_magic_quotes_runtime at the beginning of the entire program to check the setting status to determine whether to manually handle the problem, or use set_magic_quotes_runtime (0) to disable it at the beginning (or when automatic escape is not required. 5. file vulnerability prevention For PHP file leakage, you can set and configure the server for defense purposes. The specific operations are as f

Event Background: Recently, many websites have been attacked. After research and analysis by quickshield Security laboratory, these websites use DedeCMS content management systems. DedeCMS has a very serious vulnerability, attackers can directly write a "one-sentence Trojan" to the server ". The cause of the DedeCMS vulnerability is mainly caused by variable coverage. By submitting variables, attackers ov

Solve the 6, ASP Program Password Verification Vulnerability Vulnerability Description: Many web sites put passwords into the database and use the following SQL for login verification (for example, ASP) Sql= "SELECT * from user where username= '" username "' and Pass= '" Pass ' " At this point, you simply construct a special username and password based on SQL,

EMail: rayh4c # 80sec.com Site: www.80sec.com Date: 2011-10-13 0 × 00 Preface As we all know, the risk definitions of XSS vulnerabilities have been vague, and cross-site scripting (XSS) vulnerabilities are both high-risk and low-risk vulnerabilities that have been controversial for a long time. There are two types of XSS vulnerabilities: persistent and non-persistent: 1. The non-persistent XSS vulnerability is generally found in URL parameters. You ne

0-day security: software vulnerability analysis technology (version 2nd) Basic Information Author:Wang QingZhang DonghuiZhou HaoWang JigangZhao Shuang Series Name:Security Technology Department Press: Electronic Industry Press ISBN:9787121133961 Mounting time: Published on: February 1, June 2011 Http://product.china-pub.com/194031 0-day security: software vulnerability analysis technology (version 2nd) Int

operational database APIs. * API: * DriverManager: Management driver * 1. Registration drive * Class.forName ("Com.mysql.jdbc.Driver"); * 2. Get the connection * getconnection (String url,string username,string password); * Connection: Connection object * 1. Create an object that executes SQL. * Statement: * Preparedstatment: * Callablestatment: * 2. Management Services: * Setautocommit (Boolean flag); * Commit (); * ROLLBACK (); * Statement: * 1. Ex

This article [email protected]Originally from: https://bbs.ichunqiu.com/thread-42943-1-1.html0x00 the vulnerability in printf functions the family of printf functions is a common function family in C programming. In general, we use the form of printf ([formatted string], arguments) to make calls, such asHowever, sometimes for the sake of convenience can also be writtenIn fact, this is a very dangerous notation. Due to a design flaw in the printf funct