Cloud Security

Brief description:Mhtml has caused many web applications to have security issues, and douban and taobao have not been spared. Microsoft, you are so evil !!! Detailed description: Mhtml: http://www.douban.com/search? Search_text = ax % bytes % 253

OpenEMR is a medical management system that can be used for medical practice management, electronic medical records, prescription writing, and medical bill application. Multiple security vulnerabilities in EMR 4.0.0 may cause leakage of sensitive

Method 1 Template MethodEnter the background, set the style template, and write code in any line. Remember, this code must be written in the left line, and there cannot be any character in front of the Code.EOT;Eval ($ );P9xiaont Then we get a shell:

Jsbug Example1: Example2: Example3 :( shit) Example4:

------------------------------------------------------------------------ Software ...... mySeatXT 0.1781 Vulnerability ...... SQL Injection Threat Level ...... Critical (4/5) Download ............ http://sourceforge.net/projects/myseat/ Discovery

Speaking of WebShell Privilege Escalation methods, online articles are mostly visible! So here I will write a few small methods I will use to raise my own permissions! It is also your own practical experience! If the method is incorrect, please give

Brief description: MyBlog is a J2ee open-source self-built blog system. Attackers can upload arbitrary files through some of its component issues.Description: fckeditor of earlier versions is used. As a result, the file name can be truncated to

Template page ---> website template ---> edit TemplateSimple: admin. php/core-edit_template? Base_dir = % 2F & template = member/default/% 23.php% 00 the trouble point of modifying the Tamper Data plug-in of Firefox: select an html page and copy the

#! /Usr/bin/k4shifz I read junshen's blog and came back to study it. Open_basedir can restrict the activity scope of files accessed by users to a specified region. It is usually the path of the home directory, and the symbol "." can be used to

GENESIS32 "32" is a new generation of configuration monitoring software developed by ICONICS "ainconnor. An interface of GENESIS32 in WEBHMI, providing OPC and visual information for GENESIS32. A control called by the WebHMI interface has a stack

I have mentioned Google Hack before. One is:Simplified Google hack Another article is:Implementation and Application of Google Hacking Here we will update several new Google Hack skills   1. phonebook: + English namePurpose: search the telephone

Irl digital media provides a comprehensive service for web design and online marketing agencies. Each web site developed by irl digital media may have SQL injection, which may cause leakage of sensitive information. [+] Info:~~~~~~~~~[~] Title:...

By radish header upx8.com Target main site:Http://www.mengniu360.com 1. You need to find the injection point and hand it to jsky. Find the injection point http://www.mengniu360.com/news_view.php? Id = 3Then, let's take a look. 'Return error and 1 = 1

St-shop is a simple, easy-to-modify, and free online mall system. Function Description:1. Up to three levels of product categories are supported2. images can be uploaded.3. Member Management4. Shopping Cart System Administrator Logon address:

Vulnerability system: poMMoVulnerability Type: CSRF (Cross-Site Request Forgery)Vulnerability cause: input filtering is laxHazard level: lowAffected Version: Aardvark PR16.1Vulnerability file: admin/setup/config/users. phpAdmin/setup/config/general.

Vulnerability Description: Q8portals is a foreign asp content management system. Due to design defects, it causes SQL injection vulnerabilities.    Vulnerability types: SQL Injection, script injection, blind injection, and Injection Vulnerabilities 

PHP + MySQL JSP + MySQL I. Basic Knowledge1. MYSQL versionLess than 4.0, more than 4.0, more than 5.0.Less than 4.0 does not support union queriesMagic_quotes_gpc above 4.0 is on by defaultMore than 5.0 of statements can be violent, table, and

Mysql multi-statement execution does not use single quotes to write outfile to shell   Mysql> use xssdb;Database changed Mysql> set @ a = 0x73656c6563742030783343310837303638373032303430363537363631364332BytesBreak;Query OK, 0 rows affected (0.00

A friend asked me to check a football site. It is purely a personal record with technical knowledgeGoals: http://www.bkjia.com/(to replace the target site URL only, not to detect the site)Architecture: Linux + Apache + Mysql + PHPTo get the shell of

Brief description: multiple sub-station databases may leak their account and password.Details: This injection is dangerous and contains too many sensitive content.Proof of vulnerability: http://sml.56.com/index.php? Act = show & Pid = 56 Database