Cloud Security

Author: LinkEr Affected Versions: xunfeng video systemHttp://www.gxwglm.com Vulnerability Type: SQL InjectionVulnerability Description: The xunfeng video system has multiple SQL injection vulnerabilities. #1. Register injection: Wwwrootegeg. asp  /*

Multiple vulnerabilities in YY (url jump & CSRF & Path & XSS & night killing bug)# Author: B0mbErM @ n# Time: 2011-01-27######################################## #########[X] csrf message * available only when the cookie is valid. Capture

XSS vulnerability files:Http: // 127.0.0.1/post/index. php? Catid = 49Online contribution functionIn this way, you do not need to register a member and send a new draft, so that many sites do not permit Member registration.View the code in the

Author: xiaokis Affected Version: V3.0   Vulnerability Type: SQL InjectionVulnerability description:File: newss. asp Vulnerability validation: http://www.bkjia.com/news/gb/newss.asp? Id = 105% 20 union % 20 select %, 3, username, 5, password, 9, 10,

This document is for Reading Notes and has not been tested by experiments.Non-security, 2010,5, P111 Note: in Oracle, except commands, these two tables are case sensitive, while user_tables and user_table_columns are case sensitive by default.1.

Target: http://www.bkjia.com/news.php? Id = 32.We query the number of fields orderHttp://www.bkjia.com/news.php? Id = 32 + order + by + 6 CorrectHttp://www.bkjia.com/news.php? Id = 32 + order + by + 7 ErrorIt indicates that there are 6 fields.Now we

Openedit is a famous web content management system. Openedit [+] Info:~~~~~~~~~Openedit Author: mr_me [+] Poc:~~~~~~~~~ View sourceprint? 001 #! /Usr/bin/python 002 # 003 # Openedit 004 # http://net-ninja.net/blog? P = 553 005 # watch

Bored at night. Then I searched the system online and accidentally found the system. So we have the following article. So that you can use SHELL later. Haha ~! By the way, we will grow and learn together.I will explain the original program in detail

Author: 0x0FFrom: 0xsec.org Vulnerability Details:The sid variable is not filtered to generate an SQL injection.Exploits: http: // site/plugin. php? Id = huxhall: huxhall & sid = 1 you know.KeyWords: inurl: huxhallRelated companies: Happy travel

Better. Based on Windows System IIS. Specific Method: Go to the background and add a front-end account (register at the front-end). It is convenient to add a back-end account, You do not need to fill in some spam questions. It is best to add a

  This problem is common in recent years. Asp and. net coexist frequently. After all, installing a Framework is a simple task for general VM vendors. Of course, the security problems involved are easily ignored. By default, asp.net runs web code in

Author: lis0Source: lis0s Blog Test environment: Apache/2.0.49 (Win32) PHP/4.3.1 + Winxp sp2 I recently reviewed the PHP Chinese manual after reading the code of a program, and suddenly thought of a method to hide the backdoor, I would like to share

Release date: 2011-03.10Author: asmc Affected Versions: 5 UCMS Http://www.5u.hk Vulnerability Type: SQL Injection Vulnerability Detailed description:When I recently tested a website, I submitted/admin/, and the browser flashed "Carefree Network

N'cms is a content management system. n' CMS has a local file inclusion vulnerability, which may cause sensitive information leakage.[+] Info:~~~~~~~~~N'cms 1.1E Pre-Auth Local File transfer sion Remote Code Exploit[+]

We all know the ExternalInterface of Flash. call () can call external JS functions. Generally, if you see this function in flash code and the parameters in it can be controlled by users, there will be XSS risks, the same is true for the scanning

Http://xxx.com/search.php? Dy = a % and 1 = 1 -- ErrorHttp://xxx.com/search.php? Dy = a % and 1 = 2 -- Error Http://xxx.com/search.php? Dy = a % and 1 = 1 and % = normalHttp://xxx.com/search.php? Dy = a % and 1 = 2 and % = Error How can I

The latest 0-day injection in the mvmmall online store system is caused by the search. php file. The Code is as follows: Require_once 'include/common. inc. php ';Require_once ROOTPATH. 'header. php ';If ($ action! = 'Search '){$ Search_key = ";If

A small program found the program while taking the station, so it crossed and looked at the source code. The tragedy happened! Author: fallen leaves Source code: (admin/login. php) 01 02 session_start ();03 include "../include/databaseConfig. inc.

Recently pay attention to the utf7-BOM string injection, easily found instances: Http://music.10086.cn/newweb/jsp/v3_search/getDefaultKeywords.jsp? Callback = % 2B % 2Fv8% 20% bytes Bytes + ADwALwBoAHQAbQA

Heimian blog Code execution functionFunctions that can execute code in PHP. Such as eval (), assert (), '', system (), exec (), shell_exec (), passthru (), escapeshellcmd (), pcntl_exec (), etc.Demo code 1.1: 2. File Inclusion code injectionFile