Cloud Security

Release date: 2011-01.23Author: alibaba Affected Version: UCenter Home 2.0Official Website:Http://www.discuz.net Vulnerability Type: SQL InjectionVulnerability Description: uc_home 2.0 only filters parameter values in the magic_quote_gpc off

Author: Love Letter Affected Versions: JournalX 2.0Http://www.magtech.com.cn Product Introduction: JournalX 2.0 was the first to launch an overall solution for publishers/groups and journals. It has been applied to more than 600 magazines and

Author: Guo Yuqiang SQL Injection can be said to be one of the mainstream attack methods in the current network environment. How to effectively prevent Script Injection has always plagued the majority of program designers. In program design, a small

Multiple vulnerabilities in YY (url jump & CSRF & Path & XSS & night killing bug)# Author: B0mbErM @ n# Time: 2011-01-27######################################## #########[X] csrf message * available only when the cookie is valid. Capture

Code Analysis: Ad_chk.asp Determine the Administrator Logon statusIf Request. cookies ("venshop") ("admin_name") = "" or Request. cookies ("venshop") ("admin_pass") = "" or Request. cookies ("venshop") ("admin_class") = "" thenResponse. Cookies

Program name: Cmsez Web Content Manage System v2.0.0Vulnerability discovery: Xiao Shuai)Announcement date: 08-03-14Vulnerability impact: severeVulnerability file: comments. php viewimg. phpSite: http://www.cmsez.com/Vulnerability code: --------------

1. Freshow tool (by jimmyleo)Tool introduction (from freshow help documentation ):Freshow is a script decryption tool. It was originally developed to reduce mechanical operations and simplify processing steps so that you can focus on the script

Better. Based on Windows System IIS. Specific Method: Go to the background and add a front-end account (register at the front-end). It is convenient to add a back-end account, You do not need to fill in some spam questions. It is best to add a

1. What is a CC attack?CC attacks use a large number of proxy servers to initiate a large number of connections to the target computer, resulting in depletion of the target server resources and DOS.Attack principle: CC is mainly used to attack pages.

I used WVS to scan a target site and encountered a high-risk vulnerability such as "asp.net padding oracle". I checked the information on the Internet as I have never heard of it before. This technology is actually found last year, there is also a

Previously, 80vul.com published a bo-blog vulnerability [1], which has been officially fixed, but then wooyun.com published a method for bypassing the Patch [2], unfortunately, there are some restrictions for triggering. Next I will announce a

Space Deformation: + | % 20 | 2 spaces | tab | enter | Mysql, MSSQL, ACCESS /**/. MSSQL Letter Deformation: converts uppercase and lowercase letters. Mysql, MSSQL, ACCESS Bypass through type conversion modifier N: 1' = n' 1 Mysql, MSSQL By

With the development of B/S application development, more and more programmers are writing applications using this mode. However, due to the varying levels of programmers and experience, a considerable number of programmers did not judge the

Install PHP support in Ubuntu $ Sudo apt-get install libapache2-mod-php5$ Sudo apt-get install php5If you want to support graphics add php5-gd, If You Want To support Mysql add php5-mysql, here to list libapache2-mod-php5 separately, mainly because

Product: LotusCMSVendor: Arboroia Network (http://www.lotuscms.org /)Vulnerable Version: 3.0.3 and probably prior versionsVendor Notification: 01 March 2011Vulnerability Type: CSRF (Cross-Site Request Forgery)Risk level: LowCredit: High-Tech Bridge

Brief description: code execution can be performed due to improper configuration of some services. It has been used by many people.Detailed Description: by default, the Resin service can execute xtp files, MMS photo album photos, ringtones, and

The previous notes are occasionally sent. These vulnerabilities are injection vulnerabilities on download pages and search pages.1. cookie injection for Download. asp filesBecause the system uses a general anti-injection system, this is already a

 Author: Difficulties One day, a friend sent a URL to get a SHELL and open it. It is a news site. At first glance, all of them are HTML static pages. It is estimated that they are similar to CMS programs. Only the background is dynamic, and the

In Windows, the following words cannot be used to name files/folders, including "aux", "com1", "com2", "prn", "con", and "nul, however, you can use the command copy to create such folders in cmd: D: wwwroot> copy rootkit. asp \. D: \ wwwrootaux.

Bigace is a SEO-optimized content management system. In Bigace 2.7.5, The FCKeditor has a file upload vulnerability, which may cause attackers to obtain webshells. [+] Info:~~~~~~~~~ [~] Title: Bigace 2.7.5 Remote Upload file Vulnerability[~]